From d25943418a019b4f27282c470bff3773050ec965 Mon Sep 17 00:00:00 2001 From: Brian Lukoff Date: Sat, 12 Sep 2015 11:23:04 -0500 Subject: [PATCH] Add methods of the form BrowserPolicy.allowBlobUrl() to BrowserPolicy. --- packages/browser-policy-content/browser-policy-content.js | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/packages/browser-policy-content/browser-policy-content.js b/packages/browser-policy-content/browser-policy-content.js index 157b164218..78738313e4 100644 --- a/packages/browser-policy-content/browser-policy-content.js +++ b/packages/browser-policy-content/browser-policy-content.js @@ -255,6 +255,7 @@ _.each(["script", "object", "img", "media", var allowMethodName = "allow" + methodResource + "Origin"; var disallowMethodName = "disallow" + methodResource; var allowDataMethodName = "allow" + methodResource + "DataUrl"; + var allowBlobMethodName = "allow" + methodResource + "BlobUrl"; var allowSelfMethodName = "allow" + methodResource + "SameOrigin"; var disallow = function () { @@ -278,6 +279,10 @@ _.each(["script", "object", "img", "media", prepareForCspDirective(directive); cspSrcs[directive].push("data:"); }; + BrowserPolicy.content[allowBlobMethodName] = function () { + prepareForCspDirective(directive); + cspSrcs[directive].push("blob:"); + }; BrowserPolicy.content[allowSelfMethodName] = function () { prepareForCspDirective(directive); cspSrcs[directive].push(keywords.self);