canmove, Confirmed users
1,537
edits
Security/CSP/Specification: Difference between revisions
m
MUST NOT!
m (MUST NOT!) |
|||
| Line 325: | Line 325: | ||
</font> | </font> | ||
<font color="#060"> | <font color="#060"> | ||
* User Agents MUST | * User Agents MUST NOT block: | ||
** Functions declared using the function operator, e.g. function f() { some_code }, or var f = function() { some_code } | ** Functions declared using the function operator, e.g. function f() { some_code }, or var f = function() { some_code } | ||
** calls to setTimeout using a Function argument, e.g. setTimeout(myFunc, 1000) | ** calls to setTimeout using a Function argument, e.g. setTimeout(myFunc, 1000) | ||
| Line 339: | Line 339: | ||
</font> | </font> | ||
<font color="#060"> | <font color="#060"> | ||
* User Agents MUST | * User Agents MUST NOT block: | ||
** data: URIs when used as a source for inline content explicitly allowed by the protected document's policy. | ** data: URIs when used as a source for inline content explicitly allowed by the protected document's policy. | ||
</font> | </font> | ||
| Line 353: | Line 353: | ||
</font> | </font> | ||
<font color="#060"> | <font color="#060"> | ||
* User Agents MUST | * User Agents MUST NOT block: | ||
** XBL bindings loaded via the chrome: or resource: protocols | ** XBL bindings loaded via the chrome: or resource: protocols | ||
</font> | </font> | ||