Closed Bug 666056 Opened 13 years ago Closed 12 years ago

Switch CSP "xhr-src" directive to "connect-src"

Categories

(Core :: DOM: Core & HTML, defect)

Product:
Core
Component:
DOM: Core & HTML
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 746978

People

(Reporter: bsterne, Assigned: bsterne)

Details

Currently, xhr-src only restricts the list of hosts to which a page can connect to via XHR. We should change the directive name to "connect" and apply the restrictions to: XMLHttpRequest, WebSocket, and EventSource.
Summary: Switch CSP "xhr-src" directive to "connect" → Switch CSP "xhr-src" directive to "connect-src"
Duping this to bug 746968 "sync CSP directive parsing and directive names with w3c CSP 1.0 spec"
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.