OLD | NEW |
1 <!-- Copyright (c) 2011 The Chromium Authors. All rights reserved. | 1 <!-- Copyright (c) 2011 The Chromium Authors. All rights reserved. |
2 Use of this source code is governed by a BSD-style license that can be | 2 Use of this source code is governed by a BSD-style license that can be |
3 found in the LICENSE file. | 3 found in the LICENSE file. |
4 --> | 4 --> |
5 <!-- X-WebKit-CSP is our development name for Content-Security-Policy. | 5 <!-- X-WebKit-CSP is our development name for Content-Security-Policy. |
6 TODO(tsepez) rename when Content-security-policy is done. | 6 TODO(tsepez) rename when Content-security-policy is done. |
7 TODO(tsepez) remove unsafe-eval when bidichecker_packaged.js fixed. | 7 TODO(tsepez) remove unsafe-eval when bidichecker_packaged.js fixed. |
8 TODO(tsepez) chrome-extension: permits the ChromeVox screen reader | 8 TODO(tsepez) chrome-extension: permits the ChromeVox screen reader |
9 extension to function on these pages. Remove it when the extension | 9 extension to function on these pages. Remove it when the extension |
10 is updated to stop injecting script into the pages. | 10 is updated to stop injecting script into the pages. |
11 --> | 11 --> |
12 <meta | 12 <meta |
13 http-equiv="X-WebKit-CSP" | 13 http-equiv="X-WebKit-CSP" |
14 content="object-src 'none'; | 14 content="object-src 'self'; |
15 script-src chrome://resources | 15 script-src chrome://resources |
16 chrome-extension://mndnfokpggljbaajbnioimlmbfngpief | 16 chrome-extension://mndnfokpggljbaajbnioimlmbfngpief |
17 'self' | 17 'self' |
18 'unsafe-eval'"> | 18 'unsafe-eval'"> |
OLD | NEW |