Bug 1942025 - Improve the about:privatebrowsing CSP. r=firefox-desktop-core-reviewers ,Gijs

Differential Revision: https://phabricator.services.mozilla.com/D234508

Bug 1942025 - Improve the about:privatebrowsing CSP. r=firefox-desktop-core-reviewers ,Gijs
0beebec4 · Tom Schuster · ma1 · 7759f889 · 0beebec4
Verified Commit 0beebec4 authored 2 months ago by Tom Schuster Committed by ma1 2 weeks ago
--- a/browser/components/privatebrowsing/content/aboutPrivateBrowsing.html
+++ b/browser/components/privatebrowsing/content/aboutPrivateBrowsing.html
@@ -10,7 +10,7 @@
    <meta charset="utf-8" />
    <meta
      http-equiv="Content-Security-Policy"
-      content="default-src chrome: blob:; object-src 'none'"
+      content="default-src chrome:; img-src chrome: blob:; object-src 'none';"
    />
    <meta name="color-scheme" content="light dark" />
    <link rel="icon" href="chrome://browser/skin/privatebrowsing/favicon.svg" />