Open Bug 1457204 Opened 4 years ago Updated 6 months ago

Implement `prefetch-src` CSP directive


(Core :: DOM: Security, task, P3)





(Reporter: yoav, Unassigned)


(Blocks 1 open bug)


(Keywords: dev-doc-needed, Whiteboard: [domsecurity-backlog2])

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36

Steps to reproduce:

In order to block potential data leaks through prefetch requests, it was decided [1] that a `prefetch-src`CSP directive would be added and control such requests, and that prefetch requests would have their own `Request.initiator` and an empty string destination[2].


Actual results:

Going to the tests fail

Expected results:

They should pass
Component: Untriaged → DOM: Security
Product: Firefox → Core
Priority: -- → P3
Whiteboard: [domsecurity-backlog2]
Type: defect → task
Version: 47 Branch → unspecified
See Also: → 1242902
Blocks: csp-w3c-3
You need to log in before you can comment on or make changes to this bug.