21
edits
Talk:Security/CSP/Spec: Difference between revisions
→video and audio src
| Line 206: | Line 206: | ||
== video and audio src == | == video and audio src == | ||
shouldn't there be a video-src and audio-src for the | shouldn't there be a video-src and audio-src for the <video> and <audio> tags? Reasons for inclusion being the same as that for img-src. I am a little worried that there might be way too many <elementname>-src in the spec. --duryodhan | ||
== javascript: URIs by user == | |||
If javascript: URIs are disabled by the site, and the user wants to execute some bookmarklet , it would still work ? I am pretty sure that the answer is yes, but just wanted to confirm. --duryodhan | |||