Closed Bug 1402332 Opened 7 years ago Closed 7 years ago

CSP: Enforce script-src for workers in the absence of worker-src

Categories

(Core :: DOM: Security, enhancement, P1)

Product:
Core
Component:
DOM: Security
Type:
enhancement

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1302667

People

(Reporter: ckerschb, Assigned: ckerschb)

References

Details

(Whiteboard: [domsecurity-active])

Our implementation of script-src should govern workers in case worker-src is not explicitly defined within a CSP.
Depends on: 1302667
Assignee: nobody → ckerschb
Status: NEW → ASSIGNED
No longer depends on: 1302667
Priority: -- → P1
Whiteboard: [domsecurity-active]
Depends on: 1302667
In fact we are going to handle that within Bug 1302667 itself now, which makes this a duplicate of Bug 1302667.
Status: ASSIGNED → RESOLVED
Closed: 7 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.