code review: actually no `file:` should occurs within `https:` doc

10 years ago · 5777dc0b15
parent baa8e86fd4
commit 5777dc0b15
1 changed files with 1 additions and 1 deletions
--- a/src/js/traffic.js
+++ b/src/js/traffic.js
@ -654,7 +654,7 @@ var onMainDocHeadersReceived = function(details) {

    // Enforce strict HTTPS?
    if ( requestScheme === 'https' && µm.tMatrix.evaluateSwitchZ('https-strict', pageStats.pageHostname) ) {
-        csp += "default-src chrome-search: data: file: https: wss: 'unsafe-eval' 'unsafe-inline'";
+        csp += "default-src chrome-search: data: https: wss: 'unsafe-eval' 'unsafe-inline'";
    }

    // https://github.com/gorhill/httpswitchboard/issues/181