OLD | NEW |
(Empty) | |
| 1 <!-- X-WebKit-CSP is our development name for Content-Security-Policy. |
| 2 TODO(tsepez) rename when Content-security-policy is done. |
| 3 TODO(tsepez) remove unsafe-eval when bidichecker_packaged.js fixed. |
| 4 TODO(tsepez) chrome-extension: permits the ChromeVox screen reader |
| 5 extension to function on these pages. Remove it when the extension |
| 6 is updated to stop injecting script into the pages. |
| 7 --> |
| 8 <meta |
| 9 http-equiv="X-WebKit-CSP" |
| 10 content="object-src 'none'; |
| 11 script-src chrome://resources |
| 12 chrome-extension://mndnfokpggljbaajbnioimlmbfngpief |
| 13 'self' |
| 14 'unsafe-eval'"> |
OLD | NEW |