Closed Bug 1259648 Opened 8 years ago Closed 8 years ago

CSP policy does not work in fetch() in dedicated worker.

Categories

(Core :: DOM: Security, defect)

Product:
Core
Component:
DOM: Security
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 959388

People

(Reporter: tnguyen, Unassigned)

References

Details

(Whiteboard: [domsecurity-backlog]) 

This test hits this issue: <https://dxr.mozilla.org/mozilla-central/source/testing/web-platform/tests/fetch/api/policies/csp-blocked-worker.html>

What happens is the document is served with a CSP that sets "connect-src 'none'", 
Interestingly, nsCSPContext does not add any policy to mPolicies. There's no csp policy checks running and the test case fails.
Summary: CSP policy does not work in fetch in dedicated worker. → CSP policy does not work in fetch() in dedicated worker.
Blocks: 1251378
No longer blocks: 1251378
Blocks: 1251378
Whiteboard: [domsecurity-backlog]
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.