You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In Firefox-webext, data: and blob: URIs can be seen by a webRequest.onBeforeRequest listener, despite the documentation implying this is not the case:
The special value "<all_urls>" matches all URLs under any of the supported schemes: that is, "http", "https", "file", "ftp", "app".
However when I use <all_urls>, I see data: URIs being passed on uBO's webRequest.onBeforeRequest listener. (Test URL: https://www.google.ca/search?q=images&tbm=isch, images in top rows are typically data: URI-based).
uBO converts a filter such as |data: into a csp=-based filter, since the webRequest.onBeforeRequest API of Chromium-based browsers can't see data: or blob: URIs.
Support native data:/blob: filtering when the webext API of a platform can support it, convert into a csp= filter only when the platform cannot support it.
The text was updated successfully, but these errors were encountered:
gorhill
changed the title
Support filtering of |data:, |blob: [firefox-webext]
Support native filtering of |data:, |blob: [firefox-webext]
Jul 4, 2017
In Firefox-webext,
data:
andblob:
URIs can be seen by a webRequest.onBeforeRequest listener, despite the documentation implying this is not the case:However when I use
<all_urls>
, I seedata:
URIs being passed on uBO's webRequest.onBeforeRequest listener. (Test URL:https://www.google.ca/search?q=images&tbm=isch
, images in top rows are typicallydata:
URI-based).uBO converts a filter such as
|data:
into acsp=
-based filter, since the webRequest.onBeforeRequest API of Chromium-based browsers can't seedata:
orblob:
URIs.Support native
data:
/blob:
filtering when the webext API of a platform can support it, convert into acsp=
filter only when the platform cannot support it.The text was updated successfully, but these errors were encountered: