Bug #42
Nonce not set on injected scripts
Status:
Rejected
Priority:
High
Assignee:
-
Start date:
07/02/2021
Due date:
% Done:
0%
Estimated time:
Description
Update: rejected as this the expected behaviour, and is present at least as far back as commit 86ad1c6e0cf8a9ec3a529be10d7c7d1bfdf4620e. Reference
Scripts injected into a page by the extension have their "nonce" attribute set to "" rather than the appropriate nonce. This sometimes causes them to not execute (conditions for failure are not clear).
Issue seems to have been introduced in commit 261548ff184926567a623e90df7954aeef842d59.
History
Updated by jahoti about 2 years ago
- Status changed from New to Rejected
- Description updated (diff)