This test hits this issue: <https://dxr.mozilla.org/mozilla-central/source/testing/web-platform/tests/fetch/api/policies/csp-blocked-worker.html> What happens is the document is served with a CSP that sets "connect-src 'none'", Interestingly, nsCSPContext does not add any policy to mPolicies. There's no csp policy checks running and the test case fails.
Summary: CSP policy does not work in fetch in dedicated worker. → CSP policy does not work in fetch() in dedicated worker.
Status: NEW → RESOLVED
Last Resolved: 2 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 959388
You need to log in before you can comment on or make changes to this bug.