Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(4457)

Unified Diff: chrome/common/extensions/docs/templates/articles/offline_apps.html

Issue 1361763005: Disallow CSP source * matching of data:, blob:, and filesystem: URLs (Closed) Base URL: https://chromium.googlesource.com/chromium/src@master
Patch Set: Better extensions fix Created 5 years, 3 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: chrome/common/extensions/docs/templates/articles/offline_apps.html
diff --git a/chrome/common/extensions/docs/templates/articles/offline_apps.html b/chrome/common/extensions/docs/templates/articles/offline_apps.html
index d74d34cfae11dc8699fcffa6fe7e5af5550958cb..e999f552168a0f8bf82aaa4254e03fa4d88e9788 100644
--- a/chrome/common/extensions/docs/templates/articles/offline_apps.html
+++ b/chrome/common/extensions/docs/templates/articles/offline_apps.html
@@ -135,12 +135,12 @@ which is always the following and cannot be changed for Chrome Apps:
<pre>
default-src 'self';
-connect-src *;
+connect-src * data: blob: filesystem:;
style-src 'self' blob: data: filesystem: 'unsafe-inline';
img-src 'self' blob: data: filesystem:;
frame-src 'self' blob: data: filesystem:;
font-src 'self' blob: data: filesystem:;
-media-src *;
+media-src * data: blob: filesystem:;
</pre>
<h2 id="manifest"> Specifying offline_enabled </h2>
« no previous file with comments | « chrome/common/extensions/docs/templates/articles/app_csp.html ('k') | extensions/common/manifest_handlers/csp_info.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698