[webkit-reviews] review granted: [Bug 57283] CSP object-src should block plugin loads : [Attachment 88188] Patch

[bugzilla-daemon at webkit.org]

Eric Seidel <eric at webkit.org> has granted Adam Barth <abarth at webkit.org>'s
request for review:
Bug 57283: CSP object-src should block plugin loads
https://bugs.webkit.org/show_bug.cgi?id=57283

Attachment 88188: Patch
https://bugs.webkit.org/attachment.cgi?id=88188&action=review

------- Additional Comments from Eric Seidel <eric at webkit.org>
View in context: https://bugs.webkit.org/attachment.cgi?id=88188&action=review

Seems reasonable.  THank you.

> Source/WebCore/loader/DocumentWriter.cpp:124
> +    // FIXME: Do we need to consult the content security policy here about
blocked plug-ins?

How might we hit this case?