[webkit-reviews] review granted: [Bug 57283] CSP object-src should block plugin loads : [Attachment 88188] Patch
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Wed Apr 6 10:13:22 PDT 2011
Eric Seidel <eric at webkit.org> has granted Adam Barth <abarth at webkit.org>'s
request for review:
Bug 57283: CSP object-src should block plugin loads
https://bugs.webkit.org/show_bug.cgi?id=57283
Attachment 88188: Patch
https://bugs.webkit.org/attachment.cgi?id=88188&action=review
------- Additional Comments from Eric Seidel <eric at webkit.org>
View in context: https://bugs.webkit.org/attachment.cgi?id=88188&action=review
Seems reasonable. THank you.
> Source/WebCore/loader/DocumentWriter.cpp:124
> + // FIXME: Do we need to consult the content security policy here about
blocked plug-ins?
How might we hit this case?
More information about the webkit-reviews
mailing list