Project

General

Profile

Bug #42

Nonce not set on injected scripts

Added by jahoti about 1 year ago. Updated about 1 year ago.

Status:
Rejected
Priority:
High
Assignee:
-
Start date:
07/02/2021
Due date:
% Done:

0%

Estimated time:

Description

Update: rejected as this the expected behaviour, and is present at least as far back as commit 86ad1c6e0cf8a9ec3a529be10d7c7d1bfdf4620e. Reference

Scripts injected into a page by the extension have their "nonce" attribute set to "" rather than the appropriate nonce. This sometimes causes them to not execute (conditions for failure are not clear).

Issue seems to have been introduced in commit 261548ff184926567a623e90df7954aeef842d59.

History

#1

Updated by jahoti about 1 year ago

  • Description updated (diff)
  • Status changed from New to Rejected
#2

Updated by jahoti about 1 year ago

  • Description updated (diff)
#3

Updated by jahoti about 1 year ago

  • Description updated (diff)
#4

Updated by jahoti about 1 year ago

  • Description updated (diff)

Also available in: Atom PDF