2 matches found
Mozilla: frame-ancestors Content Security Policy directive was not enforced for framed extension pages
The Mozilla Foundation Security Advisory describes this flaw as: Web-accessible extension pages pages with a moz-extension:// scheme were not correctly enforcing the frame-ancestors directive when it was used in the Web Extension's Content Security Policy...
Mozilla: frame-ancestors Content Security Policy directive was not enforced for framed extension pages
The Mozilla Foundation Security Advisory describes this flaw as: Web-accessible extension pages pages with a moz-extension:// scheme were not correctly enforcing the frame-ancestors directive when it was used in the Web Extension's Content Security Policy...