3 ms·
> ... or on a Samba network share that your computer is already connected to. Does CSP prevent this working with, for example, a malicious.js file on a remote,
by jlgaddis 8y ago
> ... or on a Samba network share that your computer is already connected to.
Does CSP prevent this working with, for example, a malicious.js file on a remote, attacker-controlled Samba server (configured to allow "anonymous" connections)?
- aegarbutt 8y agoThe CSP policy was 'self'. The problem is that all file:// URIs share an origin in Electron. So, 'self' is ALL file:// URIs.