Comment 214 for bug 1022741

Revision history for this message
In , Dev-akhawe+mozilla (dev-akhawe+mozilla) wrote :

In bug 671389, we apply the sandbox flags to the document and not the docshell (since in CSP, the sandbox is only for the document). Relying on docshell flags for enforcing the "disallow plugins" requirement, won't work for CSP sandbox. Does anyone have a suggestion for how to fix this concern?