News for hackers. Stuff that matters.

A comment on Neatly Bypassing Content Security Policy. Parent comment

Re:Neatly Bypassing Content Security Policy by sametmax on Thursday July 12, 2018 @03:18AM (#17512799)
It may also prevent tooling to work on your site. E.G: bookmarklet won't work anymore. On browsers without extensions, they are the only way to get extra features.

It's especially annoying on github.

[ Parent | on HN ]
Re:Neatly Bypassing Content Security Policy by Promarged on Thursday July 12, 2018 @05:58AM (#17513273)
Actually CSP can also block content modifications by extensions. I frequently get CSP reports from browsers using plugins that want to insert something on my site. Some time ago I also got CSP reports that indicated the AdBlocker couldn't touch the site too...
[ Parent | on HN ]