Explicit child-src missing from options

  • Resolved bajandh

    (@bajandh)


    6 years, 1 month ago

    Repro:
    Install version 2.3 of plugin
    Load Content Security Policies section.
    Search for child.
    Find one reference to this field, but no ability to set it.

    If you set frame src, this will also emit as child src on the header. However, the documentation available on CSP indicates that frame src is deprecated, so I’d expect the plugin to show a separate field for child src, and a note about frame src being deprecated.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Thread Starter bajandh

    (@bajandh)

    Hruh, and now I check Firefox, and it tells me:
    Directive ‘child-src’ has been deprecated. Please use directive ‘worker-src’ to control workers, or directive ‘frame-src’ to control frames respectively.

    I’ll take Firefox as being more accurate than the other sites I was reading I guess.

    Thread Starter bajandh

    (@bajandh)

    Closing this one.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Explicit child-src missing from options’ is closed to new replies.