[Webkit-unassigned] [Bug 215444] New: RFC: public API to allow CSP by-passing?

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Aug 13 03:13:25 PDT 2020


https://bugs.webkit.org/show_bug.cgi?id=215444

            Bug ID: 215444
           Summary: RFC: public API to allow CSP by-passing?
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit API
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: pnormand at igalia.com

For testing purposes it's sometimes needed to disable CSP checks. WebKit already has an API to disable CORS checks. Would a similar API be welcome upstream? On Mac this could be a WebViewConfiguration boolean option. In WPE/GTK it could be a WebContext bool construct-only property.

Any thoughts are welcome.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200813/f3a1534f/attachment.htm>


More information about the webkit-unassigned mailing list