diff options
author | Florian Bruhin <me@the-compiler.org> | 2022-05-31 14:55:21 +0200 |
---|---|---|
committer | Florian Bruhin <me@the-compiler.org> | 2022-06-22 17:41:12 +0200 |
commit | a60982368b068486e3093ad3935e3641ea120b72 (patch) | |
tree | 16ca68bb4ee10d667d525cfb36c5922f385d0695 | |
parent | c0b35a706ac348b1c43708db7fb669bf04c4041a (diff) | |
download | qutebrowser-a60982368b068486e3093ad3935e3641ea120b72.tar.gz qutebrowser-a60982368b068486e3093ad3935e3641ea120b72.zip |
Set content.local_content_can_access_file_urls to False for userscripts dir
See #7220
-rw-r--r-- | qutebrowser/browser/webengine/webenginesettings.py | 13 |
1 files changed, 9 insertions, 4 deletions
diff --git a/qutebrowser/browser/webengine/webenginesettings.py b/qutebrowser/browser/webengine/webenginesettings.py index 5e8260eb7..8a8c4766f 100644 --- a/qutebrowser/browser/webengine/webenginesettings.py +++ b/qutebrowser/browser/webengine/webenginesettings.py @@ -505,12 +505,17 @@ def _init_default_settings(): hide_userconfig=True) if machinery.IS_QT6: + userscripts_settings: List[Tuple[str, Any]] = [ + ("content.local_content_can_access_remote_urls", True), + ("content.local_content_can_access_file_urls", False), + ] # https://codereview.qt-project.org/c/qt/qtwebengine/+/375672 url = pathlib.Path(standarddir.data(), "userscripts").as_uri() - config.instance.set_obj("content.local_content_can_access_remote_urls", - True, - pattern=urlmatch.UrlPattern(f"{url}/*"), - hide_userconfig=True) + for setting, value in userscripts_settings: + config.instance.set_obj(setting, + value, + pattern=urlmatch.UrlPattern(f"{url}/*"), + hide_userconfig=True) def init(): |