Inherit CSP for blob workers (#38033)

Workers created from Blobs inherit their CSP. Now we inherit the CSP and
set the correct base API url. The base API url should be used when
determining the
report-uri endpoint. Otherwise, the blob URL would be used as a base,
which is invalid and the report wouldn't be sent.

Also create a helper method to concatenate two optionals of CSPList,
which was used in several places.

Part of #4577

Signed-off-by: Tim van der Lippe <tvanderlippe@gmail.com>
This commit is contained in:
Tim van der Lippe 2025-07-17 10:14:20 +02:00 committed by GitHub
parent 439cb00e31
commit 18d1a62add
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
27 changed files with 116 additions and 236 deletions

View file

@ -911260,7 +911260,7 @@
]
],
"dedicated-worker-from-blob-url.window.js": [
"8455285571a357a5e6c46a38dcf465f7bd432b55",
"61a1c06c246a274b642aae4c56974ef15ae4f5fe",
[
"workers/dedicated-worker-from-blob-url.window.html",
{}
@ -912969,7 +912969,7 @@
}
},
"shared-worker-from-blob-url.window.js": [
"98e34cc3a69a17f31cf5b890744e5f9ca52559b5",
"a479767df39f2b91658b543d9f820d9d802143c9",
[
"workers/shared-worker-from-blob-url.window.html",
{}