Bug 165804

Summary: CSP: ws: and wss: blocked with connect-src *
Product: WebKit Reporter: Daniel Bates <dbates>
Component: WebCore Misc.Assignee: Daniel Bates <dbates>
Status: RESOLVED FIXED    
Severity: Normal CC: aestes, bfulgham, commit-queue, mkwst
Priority: P2 Keywords: InRadar, WebExposed
Version: WebKit Local Build   
Hardware: All   
OS: All   
Attachments:
Description Flags
Patch and layout tests none

Description Daniel Bates 2016-12-13 09:58:49 PST 
We should allow * to match ws: or wss: when used in a Content Security Policy directive. This will make our handling of * more closely conform to <https://w3c.github.io/webappsec-csp/#match-url-to-source-expression> (2 December 2016).
Comment 1 Daniel Bates 2016-12-13 09:59:47 PST 
<rdar://problem/28563643>
Comment 2 Daniel Bates 2016-12-13 10:19:37 PST 
Created attachment 297019 [details]
Patch and layout tests
Comment 3 David Kilzer (:ddkilzer) 2016-12-13 16:10:20 PST 
Comment on attachment 297019 [details]
Patch and layout tests

r=me
Comment 4 Daniel Bates 2016-12-13 20:18:50 PST 
Comment on attachment 297019 [details]
Patch and layout tests

Clearing flags on attachment: 297019

Committed r209789: <http://trac.webkit.org/changeset/209789>
Comment 5 Daniel Bates 2016-12-13 20:18:55 PST 
All reviewed patches have been landed.  Closing bug.