Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Question is, can you sidestep or disable them in user scripts or in developer tools, without disabling CSP entirely or doing something even more invasive (and generally precluding use of that browser instance for browsing)?


We made sure to exclude WebExtensions code from web pages's Trusted Types restrictions enforcement. (Bugs can happen of course)


Sorry, so you mean something like Violentmonkey scripts would be unaffected?


I sincerely thank you for doing that - and for saying it!




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: