CrOS MediaApp: set "oject-src" & "frame-src" CSP so we can load PDFs.
There seems to be a change in M87 unrelated to the CrOS MediaApp which broke PDF loading. I think this was due to tighter CSP. This change sets our CSP so we can load PDFs as blob urls in our untrusted context and adds a test for coverage of the "object-src" policy. Further work to make our tests better & provide coverage for "frame-src" is captured in crbug/1148090. Bug: b/172881869, 1148090 Change-Id: I6e5ea0816c7f8c5a4eb382ed376e4fd98f9f671c Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2531075Reviewed-by:dstockwell <dstockwell@chromium.org> Reviewed-by:
David Lei <dlei@google.com> Reviewed-by:
Patti <patricialor@chromium.org> Commit-Queue: David Lei <dlei@google.com> Commit-Queue: dstockwell <dstockwell@chromium.org> Auto-Submit: David Lei <dlei@google.com> Cr-Commit-Position: refs/heads/master@{#827021}
Showing
Please register or sign in to comment