Skip to main content

#Firefox should now support extensions’ content scripts on pages with a sandbox CSP/iframe directive:

Bugzilla bug 1411641: CSP ‘sandbox’ directive prevents content scripts from matching, due to unique origin, breaking also browser features is resolved in the v128 branch, coming in a few months.

Meanwhile WebKit doesn’t even support media controls on pages with a sandbox directive, requiring me to relax it on any page with a video or audio element.

1411641 - CSP 'sandbox' directive prevents content scripts from matching, due to unique origin, breaking also browser features [Screenshots]

RESOLVED (rob) in WebExtensions - General. Last updated 2024-05-15.
bugzilla.mozilla.org
#firefox
This entry was edited (3 months ago)

Seirdy reshared this.

in reply to Seirdy

Seirdy
Seirdy
• •
This is the biggest browser bug (in all three browser engines!!) that I’ve had to deal with so I’m so happy right now
in reply to Seirdy

Seirdy
Seirdy
• •
Anybody wanna try a build of Firefox v128 a few weeks from now (it probably hasn’t shipped yet) and tell me if e.g. the uBlock Origin element picker or Tridactyl works on seirdy.one without adding ?sandbox=off (my workaround) to the URL?
This entry was edited (3 months ago)

Seirdy reshared this.

in reply to Seirdy

easrng
easrng
• •
still broken on the latest nightly with an x86_64 linux build
in reply to Seirdy

Sandy Vujaković
Sandy Vujaković
• •
I’ve just checked on Nightly 128.0a1 (2024-05-21) and I can’t even exit element picker mode without closing the tab or loading a different page, let alone pick anything 😅
in reply to Sandy Vujaković

Seirdy
Seirdy
• •
@elsandosgrande alr. I’ll probably just remove the sandbox parameter from my site in a future update.
@Sandy Vujaković
⇧