[Webkit-unassigned] [Bug 179728] CSP: Hide nonce values from the DOM

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Oct 11 12:05:53 PDT 2021


https://bugs.webkit.org/show_bug.cgi?id=179728

Patrick Griffis <pgriffis at igalia.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |pgriffis at igalia.com

--- Comment #4 from Patrick Griffis <pgriffis at igalia.com> ---
Can somebody confirm this is still a problem?

Using the demo Philip linked on Firefox 93, Chrome 94, WebKitGTK (2.35), and Safari iOS, all behave the same.

Also running the WPT locally[0] with WebKitGTK results in all tests passing. I see that the wpt.fyi still shows failures though.


[0] run-webkit-tests 'imported/w3c/web-platform-tests/content-security-policy/nonce-hiding' --verbose --force

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20211011/24524d8a/attachment.htm>


More information about the webkit-unassigned mailing list