Mirrors
/
noscript
mirror of https://github.com/hackademix/noscript.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fallback to synchronous policy fetching if the document is already loaded (e.g. on updates).

This commit is contained in:
hackademix 2022-01-31 17:16:52 +01:00
parent 0ff5320725
commit 24317964a6
1 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
src/content/staticNS.js
View File

@ -86,14 +86,18 @@
debug("Fetching policy for actual URL %s (was %s)", url, document.URL);
}
debug(`Synchronously fetching policy for ${url}.`);
if (this.syncFetchPolicy) {
// extra hops to ensure that scripts don't run when CSP has not been set through HTTP headers
this.syncFetchPolicy();
} else {
this.setup(
browser.runtime.sendSyncMessage({id: "fetchPolicy", url, contextUrl: url})
);
let msg = {id: "fetchPolicy", url, contextUrl: url};
if (document.readyState === "complete") {
// no point fetching synchronously, since the document is already loaded (hot extension update?)
(async () => this.setup(await browser.runtime.sendMessage(msg)))();
} else {
debug(`Synchronously fetching policy for ${url}.`);
this.setup(browser.runtime.sendSyncMessage(msg));
}
}
},