Closed
Bug 1259648
Opened 9 years ago
Closed 9 years ago
CSP policy does not work in fetch() in dedicated worker.
Categories
(Core :: DOM: Security, defect)
Core
DOM: Security
Tracking
()
RESOLVED
DUPLICATE
of bug 959388
People
(Reporter: tnguyen, Unassigned)
References
Details
(Whiteboard: [domsecurity-backlog])
This test hits this issue: <https://dxr.mozilla.org/mozilla-central/source/testing/web-platform/tests/fetch/api/policies/csp-blocked-worker.html>
What happens is the document is served with a CSP that sets "connect-src 'none'",
Interestingly, nsCSPContext does not add any policy to mPolicies. There's no csp policy checks running and the test case fails.
|
Reporter | |
Updated•9 years ago
|
Summary: CSP policy does not work in fetch in dedicated worker. → CSP policy does not work in fetch() in dedicated worker.
|
||
Updated•9 years ago
|
Whiteboard: [domsecurity-backlog]
|
|
Reporter | |
Updated•9 years ago
|
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•