From 7e5ec902e91a07cfbc3d237db65577f7e73dda1a Mon Sep 17 00:00:00 2001 From: ldm0 Date: Fri, 17 Jul 2026 05:25:36 +0800 Subject: [PATCH] fix(csp): report eval source locations --- moli-renderer-v8/src/host/scripts/tests.rs | 2 +- .../context_host/security_policy.rs | 19 ------------------- 2 files changed, 1 insertion(+), 20 deletions(-) diff --git a/moli-renderer-v8/src/host/scripts/tests.rs b/moli-renderer-v8/src/host/scripts/tests.rs index 7d31c4fef..4b1e9941b 100644 --- a/moli-renderer-v8/src/host/scripts/tests.rs +++ b/moli-renderer-v8/src/host/scripts/tests.rs @@ -889,7 +889,7 @@ fn runtime_preparation_capture_uses_live_document_base_url() { #[test] fn runtime_preparation_only_captures_nonceable_script_nonces() { let url = Url::parse("https://example.test/").expect("test url should parse"); - let document = HtmlParser.parse( + let document = HtmlParser::SCRIPTING_ENABLED.parse( url.clone(), "".to_owned(), ); diff --git a/moli-renderer-v8/src/native_bridge/context_host/security_policy.rs b/moli-renderer-v8/src/native_bridge/context_host/security_policy.rs index fb5923e36..e33770ff5 100644 --- a/moli-renderer-v8/src/native_bridge/context_host/security_policy.rs +++ b/moli-renderer-v8/src/native_bridge/context_host/security_policy.rs @@ -1312,22 +1312,3 @@ fn current_script_violation_location( let column_number = i32::try_from(frame.get_column()).unwrap_or_default().max(0); Some((source_file, line_number, column_number)) } - -fn current_script_violation_location( - scope: &mut v8::PinScope<'_, '_>, -) -> Option<(String, i32, i32)> { - let stack = v8::StackTrace::current_stack_trace(scope, 1)?; - let frame = stack.get_frame(scope, 0)?; - let source_file = frame - .get_script_name_or_source_url(scope) - .map(|source| source.to_rust_string_lossy(scope)) - .map(|source| { - crate::content_security_policy::content_security_policy_source_file_for_report(&source) - }) - .unwrap_or_default(); - let line_number = i32::try_from(frame.get_line_number()) - .unwrap_or_default() - .max(0); - let column_number = i32::try_from(frame.get_column()).unwrap_or_default().max(0); - Some((source_file, line_number, column_number)) -}