[webkit-reviews] review granted: [Bug 234140] Implement step 17 of main fetch algorithm : [Attachment 446708] Patch

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Dec 10 08:34:58 PST 2021


Brent Fulgham <bfulgham at webkit.org> has granted youenn fablet
<youennf at gmail.com>'s request for review:
Bug 234140: Implement step 17 of main fetch algorithm
https://bugs.webkit.org/show_bug.cgi?id=234140

Attachment 446708: Patch

https://bugs.webkit.org/attachment.cgi?id=446708&action=review




--- Comment #3 from Brent Fulgham <bfulgham at webkit.org> ---
Comment on attachment 446708
  --> https://bugs.webkit.org/attachment.cgi?id=446708
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=446708&action=review

r=me

>
LayoutTests/imported/w3c/web-platform-tests/service-workers/service-worker/reso
urces/fetch-csp-iframe.html.sub.headers:1
> +Content-Security-Policy: img-src https://{{host}}:{{ports[https][0]}};
connect-src 'unsafe-inline' 'self'

Do you know if this new connect-src rule is needed because of a bug in our CSP
implementation?


More information about the webkit-reviews mailing list