Issue 4722 - Drop support for Chrome 41 - 48

lib/csp.js

Index: lib/csp.js
diff --git a/lib/csp.js b/lib/csp.js
index 937792e99861062ac326b7f38b5adeb71c6fc5ec..5309863ab1bb65b9f8a5318d44ef723d0a6d49e9 100644
--- a/lib/csp.js
+++ b/lib/csp.js
@@ -34,15 +34,13 @@ chrome.webRequest.onHeadersReceived.addListener(function(details)
       // since the Chrome extension API does not allow us to intercept them.
       // https://bugs.chromium.org/p/chromium/issues/detail?id=129353
       //
-      // We also need the frame-src and child-src restrictions since CSPs are
+      // We also need the child-src and object-src restrictions since CSPs are
       // not inherited from the parent for documents with data: and blob: URLs.
       // https://bugs.chromium.org/p/chromium/issues/detail?id=513860
       //
-      // As of Chrome 49 "http:" also includes "https:" implictly. We specify
-      // both here for compatibility with earlier versions of Chrome.
+      // "http:" also includes "https:" implictly.
       // https://www.chromestatus.com/feature/6653486812889088
-      value: "connect-src http: https:; frame-src http: https:; " +
-        "child-src http: https:; object-src http: https:"
+      value: "connect-src http:; child-src http:; object-src http:"
     });
     return {responseHeaders: details.responseHeaders};
   }