Out of curiosity: wouldn't an injected script in the page enabled via sha-nounce as the only one executable be enough, if CSP support is available?
On Fri, Oct 7, 2016 at 10:35 AM, Michael Catanzaro <[email protected]> wrote: > On Fri, 2016-10-07 at 09:25 +0200, Carlos Garcia Campos wrote: > > That's a very good point, we'll check if that's possible, or wer'll > > try > > to make it possible otherwise. > > Wow, I never considered this. > > Took a quick look at Epiphany. Guess how many Epiphany features > implemented in JS break when you use the hidden disable JS setting. > (Four.) > > Michael > _______________________________________________ > webkit-gtk mailing list > [email protected] > https://lists.webkit.org/mailman/listinfo/webkit-gtk >
_______________________________________________ webkit-gtk mailing list [email protected] https://lists.webkit.org/mailman/listinfo/webkit-gtk
