RESOLVED LATER 58644
CSP xhr-src is missing 
https://bugs.webkit.org/show_bug.cgi?id=58644
Summary CSP xhr-src is missing
Adam Barth
Reported 2011-04-15 00:24:17 PDT
CSP xhr-src is missing
Attachments
Add attachment proposed patch, testcase, etc.
Adam Barth
Comment 1 2011-04-23 21:37:05 PDT
The current plan is to not implement this directive at this time. This directive is different from the other "src" directives in that it controls a DOM API rather than an HTML element. There are other DOM APIs that aren't covered, such as new Worker(). It seems like the main value in CSP is in controlling what HTML elements can do.
Note You need to log in before you can comment on or make changes to this bug.