[Webkit-unassigned] [Bug 153157] New: CSP: Use the served CSP header for dedicated workers
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Fri Jan 15 15:07:34 PST 2016
https://bugs.webkit.org/show_bug.cgi?id=153157
Bug ID: 153157
Summary: CSP: Use the served CSP header for dedicated workers
Classification: Unclassified
Product: WebKit
Version: WebKit Local Build
Hardware: All
OS: All
Status: NEW
Keywords: BlinkMergeCandidate
Severity: Normal
Priority: P2
Component: WebCore Misc.
Assignee: webkit-unassigned at lists.webkit.org
Reporter: dbates at webkit.org
We should merge <https://src.chromium.org/viewvc/blink?view=rev&revision=194094> and <https://src.chromium.org/viewvc/blink?view=rev&revision=194143> (in order).
Use the served CSP header for dedicated workers
This CL makes workers obey the CSP that was served as a header along
with the worker script, instead of inheriting the CSP from the document
that spawned the worker. (Blob and file URLs still inherit the CSP from
the parent document.)
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160115/ed42cb49/attachment.html>
More information about the webkit-unassigned
mailing list