Bug 58644
| Summary: | CSP xhr-src is missing | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Adam Barth <abarth> |
| Component: | Tools / Tests | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED LATER | ||
| Severity: | Normal | ||
| Priority: | P2 | ||
| Version: | 528+ (Nightly build) | ||
| Hardware: | All | ||
| OS: | All | ||
| Bug Depends on: | |||
| Bug Blocks: | 53572 | ||
Adam Barth
CSP xhr-src is missing
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Adam Barth
The current plan is to not implement this directive at this time. This directive is different from the other "src" directives in that it controls a DOM API rather than an HTML element. There are other DOM APIs that aren't covered, such as new Worker(). It seems like the main value in CSP is in controlling what HTML elements can do.