4 ms·

Aren't those just overengineered sanitizers?

• TeMPOraL 7mo ago
  Question is, can you sidestep or disable them in user scripts or in developer tools, without disabling CSP entirely or doing something even more invasive (and generally precluding use of that browser instance for browsing)?
  • evilpie 7mo ago
    We made sure to exclude WebExtensions code from web pages's Trusted Types restrictions enforcement. (Bugs can happen of course)
    • duskdozer 7mo ago
      Sorry, so you mean something like Violentmonkey scripts would be unaffected?
    • TeMPOraL 7mo ago
      I sincerely thank you for doing that - and for saying it!