Skip to content

Conversation

@Yuki2718
Copy link
Contributor

@Yuki2718 Yuki2718 commented May 3, 2025

https://community.brave.com/t/topic/615710

BTW you don't want to merge #2410 ? You're unnecessarily allowing ping for AS servers, not really privacy-friendly. The same goes for @@||css-load.com^.

@ryanbr
Copy link
Collaborator

ryanbr commented May 6, 2025

*$csp=script-src-attr 'none',domain=badmouth1.com|freemcserver.net|m.economictimes.com|ondemandkorea.com|tbsradio.jp

breaks https://www.tbsradio.jp/a6j/

@Yuki2718
Copy link
Contributor Author

Yuki2718 commented May 6, 2025

What does it break? I don't see obvious breakage.

@ryanbr
Copy link
Collaborator

ryanbr commented May 6, 2025

See: #2453

@Yuki2718
Copy link
Contributor Author

Yuki2718 commented May 7, 2025

See: #2453

No, my rule doesn't cause detection. Confirmed with ||html-load.com^$important added both on desktop and on Android.

Screenshot

brave-as

It's just Brave doesn't support $document or $to for $csp, there's no problem if you remove them.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants