Bug 156322
| Summary: | Treat CSP level 2 connect-src violations as network errors | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | John Wilander <wilander> |
| Component: | Page Loading | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED FIXED | ||
| Severity: | Normal | CC: | beidson, bfulgham, dbates, webkit-bug-importer |
| Priority: | P2 | Keywords: | InRadar |
| Version: | WebKit Nightly Build | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| See Also: | https://bugs.webkit.org/show_bug.cgi?id=153598 | ||
John Wilander
As Alex Christensen points out in https://bugs.webkit.org/show_bug.cgi?id=153598#c27, we should fire an error event and not throw an exception for asynchronous requests that violate CSP. For synchronous events we should throw a NetworkError.
The details can be found here:
https://www.w3.org/TR/XMLHttpRequest/#network-error
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Radar WebKit Bug Importer
<rdar://problem/26522382>
John Wilander
This was eventually addressed in https://trac.webkit.org/changeset/199221 which is the patch for https://bugs.webkit.org/show_bug.cgi?id=153598.