On 11/29/17 12:42 PM, Emilio Cobos Álvarez wrote:
Another thing we could try to do if plain unshipping fails would be to
just hide the regex matching function, which IIUC would prevent the
security issue too. But hiding it behind a pref on non-release for now
sounds good.
Boris, would you also be fine with that?
Yes. We might need to end up continuing to ship support for just the
non-regex thing, or just url-prefix(/* whitespace only */). But we can
start with disabling altogether on nightly+early-beta for the moment.
-Boris
_______________________________________________
dev-platform mailing list
dev-platform@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform
