21
edits
Talk:Security/CSP/Spec: Difference between revisions
Jump to navigation
Jump to search
→form-action Directive? (OPEN)
| Line 185: | Line 185: | ||
Also, <tt>form-action</tt> is not part of the spec yet... but the more it is discussed, the more I'm starting to think it's useful. | Also, <tt>form-action</tt> is not part of the spec yet... but the more it is discussed, the more I'm starting to think it's useful. | ||
-[[User:Sidstamm|Sid]] | -[[User:Sidstamm|Sid]] | ||
I agree :). In addition, in the spec could you please clarify that the CSP is only applied to automatic HTTP requests and not those caused by User interaction (as I noted before)? I honestly thought that it applies to all HTTP requests. | |||
--duryodhan | |||
== <tt>frame-src</tt> Consistent Across Navigation (<span style="color:green;">OPEN</span>) == | == <tt>frame-src</tt> Consistent Across Navigation (<span style="color:green;">OPEN</span>) == | ||