| OLD | NEW |
| 1 <!-- Copyright (c) 2011 The Chromium Authors. All rights reserved. | 1 <!-- Copyright (c) 2011 The Chromium Authors. All rights reserved. |
| 2 Use of this source code is governed by a BSD-style license that can be | 2 Use of this source code is governed by a BSD-style license that can be |
| 3 found in the LICENSE file. | 3 found in the LICENSE file. |
| 4 --> | 4 --> |
| 5 <!-- X-WebKit-CSP is our development name for Content-Security-Policy. | 5 <!-- X-WebKit-CSP is our development name for Content-Security-Policy. |
| 6 TODO(tsepez) rename when Content-security-policy is done. | 6 TODO(tsepez) rename when Content-security-policy is done. |
| 7 TODO(tsepez) remove unsafe-eval when bidichecker_packaged.js fixed. | 7 TODO(tsepez) remove unsafe-eval when bidichecker_packaged.js fixed. |
| 8 TODO(tsepez) chrome-extension: permits the ChromeVox screen reader | 8 TODO(tsepez) chrome-extension: permits the ChromeVox screen reader |
| 9 extension to function on these pages. Remove it when the extension | 9 extension to function on these pages. Remove it when the extension |
| 10 is updated to stop injecting script into the pages. | 10 is updated to stop injecting script into the pages. |
| 11 --> | 11 --> |
| 12 <meta | 12 <meta |
| 13 http-equiv="X-WebKit-CSP" | 13 http-equiv="X-WebKit-CSP" |
| 14 content="object-src 'none'; | 14 content="object-src 'self'; |
| 15 script-src chrome://resources | 15 script-src chrome://resources |
| 16 chrome-extension://mndnfokpggljbaajbnioimlmbfngpief | 16 chrome-extension://mndnfokpggljbaajbnioimlmbfngpief |
| 17 'self' | 17 'self' |
| 18 'unsafe-eval'"> | 18 'unsafe-eval'"> |
| OLD | NEW |