DescriptionCSP: Loosen restrictions on inline style and event attributes.
We weren't properly performing the bypass check for inline style
attributes, nor were we correctly bypassing CSP for inline event
handlers. Of course, extensions shouldn't use either of these, but
they do. Because of course they do.
BUG=524356
R=jochen@chromium.org
Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=201974
Patch Set 1 #
Messages
Total messages: 5 (1 generated)
|