Bug 220724
| Summary: | CSP: Consider dropping support for 'plugin-types' | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Antonio Sartori <antoniosartori> |
| Component: | New Bugs | Assignee: | Nobody <webkit-unassigned> |
| Status: | NEW | ||
| Severity: | Normal | CC: | bfulgham, webkit-bug-importer, youennf |
| Priority: | P2 | Keywords: | InRadar |
| Version: | WebKit Nightly Build | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
Antonio Sartori
There is a discussion on the Content Security Policy spec about removing the 'plugin-types' directive, which is not that helpful anymore since Flash support has been discontinued, see https://github.com/w3c/webappsec-csp/issues/394.
Would WebKit be also interested in dropping that?
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Radar WebKit Bug Importer
<rdar://problem/73478460>
Antonio Sartori
Notice that even if it looks like WebKit does not support plugin-types (https://wpt.fyi/results/content-security-policy/plugin-types?label=master&label=experimental&aligned, https://wpt.fyi/results/content-security-policy/plugin-types?sha=f207cfdd15&label=master&max-count=1), there seems to be some plugin-types related check in the code https://github.com/WebKit/WebKit/blob/main/Source/WebCore/html/HTMLPlugInImageElement.cpp#L304