Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Polymer event bindings don't pass Firefox Marketplace CSP checks #439

Closed
bergie opened this issue Mar 8, 2014 · 3 comments
Closed

Polymer event bindings don't pass Firefox Marketplace CSP checks #439

bergie opened this issue Mar 8, 2014 · 3 comments

Comments

@bergie
Copy link

bergie commented Mar 8, 2014

More of a heads-up to the Polymer team than an actual bug in Polymer's end: as it stands, applications using Polymer's declarative event mappings can't be submitted as privileged apps (similar to Chrome OS Packaged App) in Firefox Marketplace.

The reason for this is a bug in Firefox Marketplace CSP checker that causes all the on-someevent attributes to fail the "inline scripting" rule check.

screenshot 2014-03-08 at 02 24 05

@rafaelw
Copy link
Contributor

rafaelw commented Mar 24, 2014

bergie, can you please submit a bug to Mozilla about this?

@rafaelw rafaelw closed this as completed Mar 24, 2014
@bergie
Copy link
Author

bergie commented Mar 24, 2014

@rafaelw you didn't read the full description here, did you :-P

This one here was just FYI and a link to the Mozilla bug, so that others using Polymer can find it.

@rafaelw
Copy link
Contributor

rafaelw commented Mar 24, 2014

Heh. Can't really pretend at this point =-). Thanks for the heads up.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants