On 5/1/13 6:48 PM, Matthew Gertner wrote:
Is it normal that subresources loaded by a stylesheet from a privileged channel 
do not trigger the content policy

Yes. Content policy checks are skipped when the loader has system principal.

If so, is there any way around this other than to not have the stylesheet's 
channel have the system principal?

There is not.

-Boris
_______________________________________________
dev-platform mailing list
dev-platform@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform

Reply via email to