Bug 165136

Summary: CSP3: Deprecate `child-src`
Product: WebKit Reporter: Mike West <mkwst>
Component: WebCore Misc.Assignee: Brent Fulgham <bfulgham>
Status: RESOLVED WONTFIX    
Severity: Normal CC: bfulgham, dbates, eoconnor, icewil, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
WIP for EWS data ews-feeder: commit-queue-

Mike West
Reported 2016-11-29 05:21:32 PST
Based on the discussion in https://github.com/w3c/webappsec-csp/issues/146, it seems like a good idea to deprecate `child-src` and move workers to `worker-src` -> `script-src` -> `default-src`. The spec's already updated: https://w3c.github.io/webappsec-csp/#directive-child-src. Note also that `frame-src` has been undeprecated; not sure if y'all have already picked up that change.
Attachments
WIP for EWS data (5.28 KB, patch)
2022-03-25 13:47 PDT, Brent Fulgham 		ews-feeder: commit-queue-
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2021-09-30 13:04:28 PDT
<rdar://problem/83733875>
Brent Fulgham
Comment 2 2022-03-25 13:47:34 PDT
Created attachment 455797 [details] WIP for EWS data
Brent Fulgham
Comment 3 2022-09-14 14:36:01 PDT
Pull request: https://github.com/Webkit/WebKit/pull/4357
Brent Fulgham
Comment 4 2022-09-15 15:21:51 PDT
This was undeprecated: w3c/webappsec-csp#313
Brent Fulgham
Comment 5 2022-09-15 15:22:27 PDT
https://github.com/w3c/webappsec-csp/pull/313 "The inheritance we ended up going with is worker-src -> child-src -> script-src -> default-src."
Note You need to log in before you can comment on or make changes to this bug.