scriptoriumadmin/zotero
1
0
Fork 0
mirror of https://github.com/zotero/zotero.git synced 2026-08-28 05:25:31 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

fx153: Re-enable chrome: DTD loading

Browse source 
Bug 2043845 put the FORCE_ALLOWED_DTD content policy type behind a pref
that's off for everything but Thunderbird, so NS_NewChannel() refused the
load with NS_ERROR_CONTENT_BLOCKED and the XML parser silently skipped the
entity. Custom elements whose markup uses DTD entities then failed to
parse with "not well-formed XML".
This commit is contained in:
Dan Stillman 2026-07-28 14:27:46 -04:00
parent 14b43c9559
commit 1c005c7e21
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
defaults/preferences/zotero.js
View file

@ -260,3 +260,6 @@ pref("svg.context-properties.content.enabled", true);
// Firefox applies a baseline "script-src chrome: resource: moz-src:" CSP to every chrome:
// document, which blocks inline <script>s and inline event handlers
pref("security.chrome_baseline_csp.enabled", false);
// Allow chrome: DTDs to be loaded, which we still use for localized strings in XUL markup
pref("dom.fetch.allow_force_allowed_dtd", true);