bug-librejs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Bug] LibreJS added comments break CSP


From: hf
Subject: [Bug] LibreJS added comments break CSP
Date: Fri, 23 Aug 2024 01:42:21 +0200

Hello,
i am using the following method to mark a script a free:

><script>
>/* @license 
>magnet:?xt=urn:btih:0b31508aeb0634b347b8270c7bee4d411b5d4109&dn=agpl-3.0.txt 
>AGPL-3.0-or-later */
>... [script is here] ...
>/* @license-end */
></script>

librejs successfully detects it and allows it, but it also ads the following 
comment to the script:

> /* LibreJS: script accepted by user. */

This breaks my Content-Security-Policy, which references it by hash like this:

> Content-Security-Policy: script-src 'self' 
> 'sha256-iMFls0ZU8xX32lV/nWVZzJ4ghFYtB0WDesDAGcMlVTU=';

It would be nice if you could just not add that comment.
Thank you

-- 
Greetings,
hf, pixelplanet team

Attachment: signature.asc
Description: This is a digitally signed message part.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]