CSP: Enforce script-src for workers in the absence of worker-src

RESOLVED DUPLICATE of bug 1302667

Status

()

P1
normal
RESOLVED DUPLICATE of bug 1302667
2 years ago
a year ago

People

(Reporter: ckerschb, Assigned: ckerschb)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [domsecurity-active])

Our implementation of script-src should govern workers in case worker-src is not explicitly defined within a CSP.
(Assignee)

Updated

2 years ago
Depends on: 1302667
(Assignee)

Updated

2 years ago
Assignee: nobody → ckerschb
Status: NEW → ASSIGNED
No longer depends on: 1302667
Priority: -- → P1
Whiteboard: [domsecurity-active]
(Assignee)

Updated

2 years ago
Depends on: 1302667
In fact we are going to handle that within Bug 1302667 itself now, which makes this a duplicate of Bug 1302667.
Status: ASSIGNED → RESOLVED
Last Resolved: a year ago
Resolution: --- → DUPLICATE
Duplicate of bug: 1302667
You need to log in before you can comment on or make changes to this bug.