[Webkit-unassigned] [Bug 270588] REGRESSION (Safari 17?): Script tag with valid CSP nonce fails to load with escaped <script> in an attribute value

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Mar 7 13:11:41 PST 2024


https://bugs.webkit.org/show_bug.cgi?id=270588

Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|Regression: Script tag with |REGRESSION (Safari 17?):
                   |valid CSP nonce fails to    |Script tag with valid CSP
                   |load with escaped <script>  |nonce fails to load with
                   |in an attribute value       |escaped <script> in an
                   |                            |attribute value
                 CC|                            |bfulgham at webkit.org,
                   |                            |charliew at apple.com,
                   |                            |webkit-bug-importer at group.a
                   |                            |pple.com,
                   |                            |wilander at apple.com

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240307/d84148b1/attachment.htm>


More information about the webkit-unassigned mailing list