From ea1c4bb5f0d01b8c2e2337963527db48da1e6415 Mon Sep 17 00:00:00 2001 From: gwarser Date: Fri, 11 Dec 2020 21:00:13 +0100 Subject: [PATCH] Block CSP reports eanbled by default --- Dashboard:-Settings.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Dashboard:-Settings.md b/Dashboard:-Settings.md index bd35af3..853384c 100644 --- a/Dashboard:-Settings.md +++ b/Dashboard:-Settings.md @@ -87,6 +87,8 @@ Keep in mind that this feature is to prevent **leakage** of your non-internet-fa ### Block CSP reports +**Enabled by default** in [master](https://github.com/gorhill/uBlock/commit/7d90f97aa1cbf2728508506f6dd7a75c054b85d1) to mitigate fingerprinting attempts as described in [LiCybora/NanoDefenderFirefox#196](https://github.com/LiCybora/NanoDefenderFirefox/issues/196). + You can block network requests made as a result of your browser reporting Content Security Policy violations ("CSP reports") to a remote server (which can be 3rd-party to the site where the violation occurred). **Important:** disabling CSP reporting is not something which will break web pages, the purpose of CSP reporting is _strictly_ a development tool for web sites.