gecko-dev/toolkit/content/mozilla.xhtml
Christoph Kerschbaumer 30285b4a58 Bug 1499354: Add object-src 'none' to the CSP of all about: pages. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D46950

--HG--
extra : moz-landing-system : lando
2019-09-26 16:22:41 +00:00

35 lines
914 B
HTML

<!DOCTYPE html
[
<!ENTITY % mozillaDTD SYSTEM "chrome://global/locale/mozilla.dtd" >
%mozillaDTD;
<!ENTITY % directionDTD SYSTEM "chrome://global/locale/global.dtd" >
%directionDTD;
]>
<!-- This Source Code Form is subject to the terms of the Mozilla Public
- License, v. 2.0. If a copy of the MPL was not distributed with this
- file, You can obtain one at http://mozilla.org/MPL/2.0/. -->
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src chrome:; object-src 'none'" />
<meta charset='utf-8' />
<title>&mozilla.title.11.14;</title>
<link rel="stylesheet" href="chrome://global/content/aboutMozilla.css"/>" type="text/css"/>
</head>
<body dir="&locale.dir;">
<section>
<p id="moztext">
&mozilla.quote.11.14;
</p>
<p id="from">
&mozilla.from.11.14;
</p>
</section>
</body>
</html>