Confirmed users
716
edits
Apps/SecurityDetails: Difference between revisions
no edit summary
No edit summary |
No edit summary |
||
| Line 201: | Line 201: | ||
* Media (audio and video) can still be loaded from anywhere. | * Media (audio and video) can still be loaded from anywhere. | ||
* Network connections can still be opened anywhere using data-centric APIs like <code>XMLHttpRequest</code> or <code>WebSocket</code>. | * Network connections can still be opened anywhere using data-centric APIs like <code>XMLHttpRequest</code> or <code>WebSocket</code>. | ||
There is no way for privileged apps to relax this policy. However we may in the future add the ability for packaged apps to define their own CSP policies, in which case that would allow apps to apply more restrictive policies. However such policies would be merged with the above policy which means that it still wouldn't allow the app to relax the policy. | |||
== Updates == | == Updates == | ||