[Webkit-unassigned] [Bug 165136] New: CSP3: Deprecate `child-src`

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=165136

            Bug ID: 165136
           Summary: CSP3: Deprecate `child-src`
    Classification: Unclassified
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mkwst at chromium.org

Based on the discussion in https://github.com/w3c/webappsec-csp/issues/146, it seems like a good idea to deprecate `child-src` and move workers to `worker-src` -> `script-src` -> `default-src`. The spec's already updated: https://w3c.github.io/webappsec-csp/#directive-child-src.

Note also that `frame-src` has been undeprecated; not sure if y'all have already picked up that change.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20161129/b670cee3/attachment.html>