Luke Wilde
8e999bca62
LibWeb/CSP: Implement the style-src-attr directive
CI / Linux, x86_64, Sanitizer, GNU (push) Waiting to run
CI / macOS, arm64, Sanitizer, Clang (push) Waiting to run
CI / Linux, x86_64, Fuzzers, Clang (push) Waiting to run
CI / Linux, x86_64, Sanitizer, Clang (push) Waiting to run
Package the js repl as a binary artifact / Linux, arm64 (push) Waiting to run
Package the js repl as a binary artifact / macOS, arm64 (push) Waiting to run
Package the js repl as a binary artifact / Linux, x86_64 (push) Waiting to run
Run test262 and test-wasm / run_and_update_results (push) Waiting to run
Lint Code / lint (push) Waiting to run
Label PRs with merge conflicts / auto-labeler (push) Waiting to run
Push notes / build (push) Waiting to run
2025-07-18 11:58:04 +12:00
Luke Wilde
574b736156
LibWeb/CSP: Implement the style-src-elem directive
2025-07-18 11:58:04 +12:00
Luke Wilde
8b0b3b186f
LibWeb/CSP: Implement the style-src directive
2025-07-18 11:58:04 +12:00
Luke Wilde
f50f23b19f
LibWeb/CSP: Implement the script-src-attr directive
2025-07-12 13:06:33 +12:00
Luke Wilde
f382bccc3d
LibWeb/CSP: Implement the script-src-elem directive
2025-07-12 13:06:33 +12:00
Luke Wilde
0cff47828d
LibWeb/CSP: Implement the script-src directive
2025-07-09 15:52:54 -06:00
Luke Wilde
985a481b5a
LibWeb/CSP: Implement the object-src directive
CI / macOS, arm64, Sanitizer_CI, Clang (push) Waiting to run
CI / Linux, x86_64, Fuzzers_CI, Clang (push) Waiting to run
CI / Linux, x86_64, Sanitizer_CI, GNU (push) Waiting to run
CI / Linux, x86_64, Sanitizer_CI, Clang (push) Waiting to run
Package the js repl as a binary artifact / Linux, arm64 (push) Waiting to run
Package the js repl as a binary artifact / macOS, arm64 (push) Waiting to run
Package the js repl as a binary artifact / Linux, x86_64 (push) Waiting to run
Run test262 and test-wasm / run_and_update_results (push) Waiting to run
Lint Code / lint (push) Waiting to run
Label PRs with merge conflicts / auto-labeler (push) Waiting to run
Push notes / build (push) Waiting to run
2025-07-06 13:40:04 +12:00
Luke Wilde
1b12aa4d8e
LibWeb/CSP: Implement the media-src directive
2025-07-06 13:40:04 +12:00
Luke Wilde
5addbcd61b
LibWeb/CSP: Implement the manifest-src directive
2025-07-06 13:40:04 +12:00
Luke Wilde
715061fb79
LibWeb/CSP: Implement the img-src directive
2025-07-05 21:21:44 +12:00
Luke Wilde
1689353beb
LibWeb/CSP: Implement the frame-src directive
2025-07-05 21:21:44 +12:00
Luke Wilde
e899438907
LibWeb/CSP: Implement the font-src directive
2025-07-05 21:21:44 +12:00
Luke Wilde
959bb5cc18
LibWeb/CSP: Implement the connect-src directive
2025-07-05 21:21:44 +12:00
rmg-x
f5de4c3dd6
LibWeb/ContentSecurityPolicy: Remove noisy "unknown directive" log
CI / macOS, arm64, Sanitizer_CI, Clang (push) Waiting to run
CI / Linux, x86_64, Fuzzers_CI, Clang (push) Waiting to run
CI / Linux, x86_64, Sanitizer_CI, GNU (push) Waiting to run
CI / Linux, x86_64, Sanitizer_CI, Clang (push) Waiting to run
Package the js repl as a binary artifact / macOS, arm64 (push) Waiting to run
Package the js repl as a binary artifact / Linux, x86_64 (push) Waiting to run
Run test262 and test-wasm / run_and_update_results (push) Waiting to run
Lint Code / lint (push) Waiting to run
Label PRs with merge conflicts / auto-labeler (push) Waiting to run
Push notes / build (push) Waiting to run
2025-06-08 00:46:49 +02:00
Shannon Booth
8a3c66d8a6
LibWeb: Make a bunch of CSP classes not realm associated
...
These are not associated with a javascript realm, so to avoid
confusion about which realm these need to be created in, make
all of these objects a GC::Cell, and deal with the fallout.
2025-04-28 12:41:28 +02:00
Luke Wilde
e34a6c86b9
LibWeb: Introduce Content Security Policy policies and directives
...
These form the basis of Content Security Policy. A policy is a
collection of directives that are parsed from either the
Content-Security-Policy(-Report-Only) HTTP header, or the `<meta>`
element.
The directives are what restrict the operations can be performed in the
current global execution context. For example, "frame-ancestors: none"
tells us to prevent the page from being loaded in an embedded context,
such as `<iframe>`.
You can see it a bit like OpenBSD's pledge() functionality, but for the
web platform: https://man.openbsd.org/pledge.2
2025-03-04 14:27:19 +01:00
