Tim van der Lippe 6656061fc3 script: Implement frame-ancestors CSP check (#43630) ...

Requires communication between the script thread and the constellation
to be able to retrieve the origin of a cross-origin document. However,
in the fast-path where the document resides in the same script-thread,
we use the `frame_element` instead.

If no CSP list is active, then we skip all this logic, to have a minimal
impact on document navigation.

Part of #4577
Fixes #36468

---------

Signed-off-by: Tim van der Lippe <tvanderlippe@gmail.com>
Signed-off-by: Tim van der Lippe <TimvdLippe@users.noreply.github.com>

2026-03-28 08:54:17 +00:00

..

csp.rs

script: Implement frame-ancestors CSP check (#43630)

2026-03-28 08:54:17 +00:00

csppolicyviolationreport.rs

script: Set correct referrer for CSP violations (#43483)

2026-03-20 15:05:58 +00:00

cspviolationreporttask.rs

script: Pass &mut JSContext to FetchResponseListener::process_response_chunk (#43657)

2026-03-26 18:05:24 +00:00

mod.rs

script: Implement support for X-Frame-Options (#43539)

2026-03-23 06:14:27 +00:00

securitypolicyviolationevent.rs

…

xframeoptions.rs

script: Implement support for X-Frame-Options (#43539)

2026-03-23 06:14:27 +00:00