Closed
Bug 1919036
Opened 1 year ago
Closed 1 year ago
CSP presence surprisingly changes program-flow / <to-javascript-parent-initiated-parent-csp.html> fails
Categories
(Core :: Security, defect)
Core
Security
Tracking
()
RESOLVED
INVALID
People
(Reporter: mbrodesser, Unassigned)
References
Details
Attachments
(1 file)
|
615 bytes,
text/html
|
Details |
The attached example is simpler than https://searchfox.org/mozilla-central/source/testing/web-platform/tests/content-security-policy/navigation/to-javascript-parent-initiated-parent-csp.html. Both presumably fail for the same reason.
|
Reporter | |
Comment 1•1 year ago
|
||
Oh, Gecko doesn't support this case (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src#browser_compatibility).
|
|
Reporter | |
Updated•1 year ago
|
Status: NEW → RESOLVED
Closed: 1 year ago
Resolution: --- → INVALID
You need to log in
before you can comment on or make changes to this bug.
Description
•