9 commits

Author	SHA1	Message	Date
Callum Law	71b039a721	LibWeb: Use document's global object in is_base_allowed_for_document ... Previously we were using the document's window - this was both contrary to spec and causing crashes when the document did not have a window (for instance the `temp_document` in `HTMLParser::parse_html_fragment`. This means we no longer crash when navigating between pages on https://rocketlabcorp.com	2025-08-16 14:19:05 +02:00
Kenneth Myhra	1228063a85	LibWeb: Enforce Integrity Policy on Fetch requests	2025-08-14 13:37:38 +01:00
Luke Wilde	4aa355658f	LibWeb/CSP: Implement the base-uri directive	2025-08-07 00:45:31 +02:00
Luke Wilde	0cff47828d	LibWeb/CSP: Implement the script-src directive	2025-07-09 15:52:54 -06:00
Luke Wilde	203c2a6b30	LibWeb/CSP: Use GC::Heap instead of JS::Realm for directive checks	2025-07-05 21:21:44 +12:00
Luke Wilde	278666edcd	LibWeb: Enforce Content Security Policy on navigation request/response	2025-04-01 04:01:28 +02:00
Luke Wilde	7643a079c0	LibWeb: Enforce Content Security Policy of Fetch responses	2025-03-19 00:55:14 +01:00
Luke Wilde	51796e2d3a	LibWeb: Report CSP violations for request	2025-03-19 00:55:14 +01:00
Luke Wilde	6f771f45e2	LibWeb: Enforce Content Security Policy on Fetch requests	2025-03-19 00:55:14 +01:00