[Webkit-unassigned] [Bug 172038] REGRESSION (r209608): Cross-origin plugin document opened in child window blocked by parent window CSP when object-src 'none' is set

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=172038

Daniel Bates <dbates at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |Regression
         Depends on|                            |165531
            Summary|PDF Plugin gets blocked by  |REGRESSION (r209608):
                   |CSP when object-src 'none'  |Cross-origin plugin
                   |is set even if the PDF is   |document opened in child
                   |served from other domain in |window blocked by parent
                   |separate tab.               |window CSP when object-src
                   |                            |'none' is set


Referenced Bugs:

https://bugs.webkit.org/show_bug.cgi?id=165531
[Bug 165531] [CSP] Policy of window opener not applied to about:blank window
-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170512/6e2447c8/attachment-0001.html>