canmove, Confirmed users
1,537
edits
Security/CSP/Specification: Difference between revisions
m
→No inline scripts will execute
m (→Violation Report Syntax: MUST NOT!) |
|||
| Line 310: | Line 310: | ||
</font> | </font> | ||
<font color="#060"> | <font color="#060"> | ||
* User Agents MUST | * User Agents MUST NOT block: | ||
** Scripts imported from external files whose sources are allowed by the protected document's policy AND are served with a Content-Type of <tt>application/javascript</tt> or <tt>application/json</tt>. | ** Scripts imported from external files whose sources are allowed by the protected document's policy AND are served with a Content-Type of <tt>application/javascript</tt> or <tt>application/json</tt>. | ||
</font> | </font> | ||