Bug 92487

Summary:

CSP directives containing invalid characters should log an error

Product:

WebKit

Reporter:

Mike West <mkwst>

Component:

WebKit Misc.

Assignee:

Mike West <mkwst>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

abarth, webkit.review.bot

Priority:

Version:

528+ (Nightly build)

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
Patch	none

Description Mike West 2012-07-27 04:16:29 PDT

`X-WebKit-CSP: script-src: 'unsafe-inline';` should log an error to the console, as the invalid `:` means the directive is ignored.

Comment 1 Mike West 2012-07-27 04:33:01 PDT

Clarifying the title of the bug, uploading a patch in a moment.

Comment 2 Mike West 2012-07-27 04:38:58 PDT

Created attachment 154906 [details]
Patch

Comment 3 Mike West 2012-07-27 04:46:16 PDT

Adam, can you take a look at this when you get a chance? Low priority, just an edge case in which a lack of logging confused me briefly.

Comment 4 WebKit Review Bot 2012-07-27 11:38:41 PDT

Comment on attachment 154906 [details]
Patch

Clearing flags on attachment: 154906

Committed r123899: <http://trac.webkit.org/changeset/123899>

Comment 5 WebKit Review Bot 2012-07-27 11:38:44 PDT

All reviewed patches have been landed.  Closing bug.

Comment 6 Mike West 2012-07-27 11:57:05 PDT

Thanks for throwing this in the CQ, Adam. I appreciate it. :)