News for hackers. Stuff that matters.

A comment on Safari’s default media controls blocked when applying a Content-Security-Policy. Parent comment

Re:Safari’s default media controls blocked when applying a C... by qpery on Monday February 25, 2019 @12:03PM (#19247098)
>Firefox treats scripts running from bookmarklets as being scripts that are directly on the page. This means that unless you list `script-src: unsafe-inline`, your CSP policy can disable the user's ability to use bookmarklets. This is the single instance where a site owner has control over the user agent without the user having ultimate veto powers.

about:config -> security.csp.enable -> false

[ Parent | on HN ]

There are no comments on this comment yet.