Merge pull request #333 from fritzmg/view-source-filter

Filter `view-source` reports
nelmio · Jan 17, 2024 · 9ae9fab · 9ae9fab
2 parents da7cc88 + 6b987b7
commit 9ae9fab
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/src/ContentSecurityPolicy/Violation/Filter/BrowserBugsNoiseDetector.php b/src/ContentSecurityPolicy/Violation/Filter/BrowserBugsNoiseDetector.php
@@ -55,6 +55,11 @@ public function match(Report $report, Request $request): bool
             }
         }
 
+        // https://bugzilla.mozilla.org/show_bug.cgi?id=1873553
+        if ('view-source' === $report->getSourceFile()) {
+            return true;
+        }
+
         // files loaded by safari & firefox extension
         // should be allowed as in Chrome
         if (

diff --git a/tests/ContentSecurityPolicy/Violation/FilterTest.php b/tests/ContentSecurityPolicy/Violation/FilterTest.php
@@ -229,6 +229,11 @@ public function provideVariousCases(): array
                 'blocked-uri' => 'www.gstatic.com',
                 'effective-directive' => 'script-src',
             ]],
+            [true, new Request(), [
+                'blocked-uri' => 'inline',
+                'source-file' => 'view-source',
+                'effective-directive' => 'style-src-attr',
+            ]],
         ];
     }
 }