Bug 1706787 Comment 1 Edit History

Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.

Why is that a bug? The CSP check is run before we "load" things so we don't know it's an empty <style> block at that point. But the worst that happens is that CSP doesn't process the block that does nothing, so either way nothing happens.

I suspect this bug is invalid, but either way we're not going to fix it given the rewrite it would take for essentially no benefit (except less reporting I guess).
Why is that a bug? The CSP check is run before we "load" things so we don't know it's an empty <style> block at that point. But the worst that happens is that CSP doesn't process the block that does nothing, so either way nothing happens.

I suspect this bug is invalid according to the spec (which is writen in terms of "fetch"), but either way we're not going to fix it given the rewrite it would take for essentially no benefit (except less reporting I guess).

Back to Bug 1706787 Comment 1