Bug 111254

Summary: CSP 1.1: Support CSP 1.1 directives on the unprefixed header.
Product: WebKit Reporter: Mike West <mkwst>
Component: WebCore Misc.Assignee: Mike West <mkwst>
Status: RESOLVED FIXED    
Severity: Normal CC: abarth, dglazkov, esprehn+autocc, fishd, jamesr, japhet, mkwst+watchlist, ojan.autocc, tkent+wkapi, webkit.review.bot
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on:    
Bug Blocks: 85558    
Attachments:
Description Flags
Patch none

Mike West
Reported 2013-03-02 10:41:47 PST
Rather than locking CSP 1.1 behind a vendor prefix, we should support it on the unprefixed header iff the runtime flag is set. This will have no effect on ports that currently disable the CSP_NEXT flag, and the 'X-WebKit-CSP' headers will continue to function just as they did before on all ports. The goal is simply to not accidentally lock early-adopters users into using a prefixed header for the 1.1 features they'd like to experiment with.
Attachments
Patch (13.99 KB, patch)
2013-03-02 11:08 PST, Mike West
no flags
Mike West
Comment 1 2013-03-02 11:08:13 PST
WebKit Review Bot
Comment 2 2013-03-02 11:10:55 PST
Please wait for approval from abarth@webkit.org, dglazkov@chromium.org, fishd@chromium.org, jamesr@chromium.org or tkent@chromium.org before submitting, as this patch contains changes to the Chromium public API. See also https://trac.webkit.org/wiki/ChromiumWebKitAPI.
WebKit Review Bot
Comment 3 2013-03-03 03:08:20 PST
Comment on attachment 191113 [details] Patch Clearing flags on attachment: 191113 Committed r144571: <http://trac.webkit.org/changeset/144571>
WebKit Review Bot
Comment 4 2013-03-03 03:08:25 PST
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.