[evilpie]

Removing security headers like Content-Security-Policy is forbidden by the addons.mozilla.org policy.

https://extensionworkshop.com/documentation/publish/add-on-p...

[gear54rus]

I don't think this is being enforced in practice, thankfully.

[davidmurdoch]

It is. It happened to us a few weeks ago.