Bug 60301

Summary: Add disable-javascript-urls CSP directive
Product: WebKit Reporter: Adam Barth <abarth>
Component: New BugsAssignee: Adam Barth <abarth>
Status: RESOLVED FIXED    
Severity: Normal CC: cevans, commit-queue
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch
none
Patch for landing none

Adam Barth
Reported 2011-05-05 14:33:08 PDT
Add disable-javascript-urls CSP directive
Attachments
Patch (4.95 KB, patch)
2011-05-05 14:35 PDT, Adam Barth 		no flags
DetailsFormatted DiffDiff
Patch for landing (5.18 KB, patch)
2011-05-06 13:09 PDT, Adam Barth 		no flags
DetailsFormatted DiffDiff
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.
Adam Barth
Comment 1 2011-05-05 14:35:09 PDT
Created attachment 92471 [details] Patch
Eric Seidel (no email)
Comment 2 2011-05-06 12:08:08 PDT
Comment on attachment 92471 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=92471&action=review > Source/WebCore/page/ContentSecurityPolicy.h:91 > + bool m_disableJavaScriptURLs; Should we note here that it's not in the spec?
Adam Barth
Comment 3 2011-05-06 13:09:17 PDT
Created attachment 92631 [details] Patch for landing
Adam Barth
Comment 4 2011-05-06 13:09:44 PDT
I added a note about this being an experimental feature that should be removed if not adopted by the working group.
WebKit Commit Bot
Comment 5 2011-05-06 14:04:09 PDT
Comment on attachment 92631 [details] Patch for landing Clearing flags on attachment: 92631 Committed r85975: <http://trac.webkit.org/changeset/85975>
WebKit Commit Bot
Comment 6 2011-05-06 14:04:13 PDT
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.