Shannon Booth
26cf55dc77
LibWeb/CSP: Prefer use of Optional<StringView> for algorithm matching
...
Over using the null state of StringView.
2026-02-21 12:37:44 +01:00
Luke Wilde
fc13f15193
LibWeb/CSP: Apply strict-dynamic to inline scripts
...
This implements https://github.com/w3c/webappsec-csp/pull/787 that
fixed the linked spec issue.
2026-02-19 14:58:09 +01:00
Tim Ledbetter
cb1a1a5cb5
LibWeb: Replace is<T>() with as_if<T>() where possible
2025-08-25 18:45:00 +02:00
Tim Ledbetter
941da11ece
LibWeb: Avoid accessing opaque origin port during CSP checks
2025-07-13 14:33:33 +02:00
Luke Wilde
0cff47828d
LibWeb/CSP: Implement the script-src directive
2025-07-09 15:52:54 -06:00
Luke Wilde
002e993f68
LibWeb/CSP: Add [[nodiscard]] to result enums
...
This makes it so we don't have to remember to specify [[nodiscard]] on
functions that return them.
2025-07-06 13:40:04 +12:00
Luke Wilde
959bb5cc18
LibWeb/CSP: Implement the connect-src directive
2025-07-05 21:21:44 +12:00
Luke Wilde
1edf7a8aa2
LibWeb/CSP: Implement URL matching algorithms
...
These are used by all the *-src attributes, to check if a given URL,
origin and redirect count matches a source list entry specified in
the *-src attribute's values, if it's allowed to.
2025-07-01 10:24:24 +12:00
Luke Wilde
278666edcd
LibWeb: Enforce Content Security Policy on navigation request/response
2025-04-01 04:01:28 +02:00
Luke Wilde
86170f4bfd
LibWeb/CSP: Introduce the ability to create and report a violation
...
A violation provides several details about an enforcement failing, such
as the URL of the document, the directive that returned "Blocked", etc.
2025-03-19 00:55:14 +01:00
