[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Bug] LibreJS added comments break CSP
From: |
hf |
Subject: |
[Bug] LibreJS added comments break CSP |
Date: |
Fri, 23 Aug 2024 01:42:21 +0200 |
Hello,
i am using the following method to mark a script a free:
><script>
>/* @license
>magnet:?xt=urn:btih:0b31508aeb0634b347b8270c7bee4d411b5d4109&dn=agpl-3.0.txt
>AGPL-3.0-or-later */
>... [script is here] ...
>/* @license-end */
></script>
librejs successfully detects it and allows it, but it also ads the following
comment to the script:
> /* LibreJS: script accepted by user. */
This breaks my Content-Security-Policy, which references it by hash like this:
> Content-Security-Policy: script-src 'self'
> 'sha256-iMFls0ZU8xX32lV/nWVZzJ4ghFYtB0WDesDAGcMlVTU=';
It would be nice if you could just not add that comment.
Thank you
--
Greetings,
hf, pixelplanet team
signature.asc
Description: This is a digitally signed message part.
[Prev in Thread] |
Current Thread |
[Next in Thread] |
- [Bug] LibreJS added comments break CSP,
hf <=