Some websites disable right click buttons and copying. Isn't that a violation of the rule as well? (I.e. Users should be allowed to copy contents but the feature is disabled) Sent from my iPhone > On Feb 24, 2016, at 3:45 AM, Daniel Veditz <dveditz@mozilla.com> wrote: > > You are indeed trolling. Making bookmarklets and some add-ons work when CSP is applied is _hard_. They are not broken because CSP-implementing browser vendors are valuing the page author over the user. We don't know how to balance a feature that wants random content injection and a feature that is trying to prevent content injection. Firefox does allow users to disable CSP entirely if they think it is interfering with their experience (users win, as the PoC says they should); I wouldn't be surprised if Chrome didn't also support that as an advanced option. > > -Dan Veditz
Received on Wednesday, 24 February 2016 09:04:18 UTC