3 ms·
Wouldn’t fixing this bug reduce security?
by pama 2y ago
Wouldn’t fixing this bug reduce security?
- shakna 2y agoIf you are using filter scripts, to block specific domains or script payloads, that extension can't load on a properly secured CSP page. And that page may be using CSP to protect throwing up ads... Or malware.
- pama 2y agoThanks.
- davidmurdoch 2y agoNo, it's explained more in the issue. An extension is a part of the "User Agent". The CSP header in FF is almost seemingly arbitrarily applied to extensions.
- pama 2y agoThanks!