[Webkit-unassigned] [Bug 165804] New: CSP: ws: and wss: blocked with connect-src *

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=165804

            Bug ID: 165804
           Summary: CSP: ws: and wss: blocked with connect-src *
    Classification: Unclassified
           Product: WebKit
           Version: WebKit Local Build
          Hardware: All
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: dbates at webkit.org
                CC: aestes at apple.com, bfulgham at webkit.org

We should allow * to match ws: or wss: when used in a Content Security Policy directive. This will make our handling of * more closely conform to <https://w3c.github.io/webappsec-csp/#match-url-to-source-expression> (2 December 2016).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20161213/523d246e/attachment.html>