Ref T4340. We don't use "<base />" so we can safely block it.
Details
Details
- Reviewers
- None
- Maniphest Tasks
- T4340: Implement Content-Security-Policy and Strict-Transport-Security headers
- Commits
- rPd5befb1a0ea3: Block use of "<base />" in the Content Security Policy
Injected "<base />" into a page, saw an error in the console showing that the browser had blocked it.
Diff Detail
Diff Detail
- Repository
- rP Phabricator
- Branch
- csp6
- Lint
Lint Passed - Unit
Tests Passed - Build Status
Buildable 19704 Build 26686: Run Core Tests Build 26685: arc lint + arc unit