search

gorhill / uMatrix

uMatrix: Point and click matrix to filter net requests according to source, destination and type
GNU General Public License v3.0
4.55k stars 470 forks source link

uMatrix does not report inline styles #924

Closed vzjrz closed 6 years ago

vzjrz commented 6 years ago

uMatrix 1.3.0 Firefox 57.0.1 I have these rules:

* * * block
google.com google.com frame allow
google.com google.com image allow
google.com google.com script allow
google.com google.com xhr allow
google.com gstatic.com css allow
google.com gstatic.com image allow
google.com gstatic.com script allow

Steps:

  1. Go to: https://www.google.com/recaptcha/api2/demo
  2. Note there is no indication that any css from google.com is being blocked umatrix
  3. Captcha fails because according to the console Content Security Policy: The page’s settings blocked the loading of a resource at self (“style-src blob: *”).

Captcha is fixed by adding the rule google.com google.com css allow