RESOLVED WONTFIX 165136
CSP3: Deprecate `child-src` 
https://bugs.webkit.org/show_bug.cgi?id=165136
Summary CSP3: Deprecate `child-src`
Mike West
Reported 2016-11-29 05:21:32 PST
Based on the discussion in https://github.com/w3c/webappsec-csp/issues/146, it seems like a good idea to deprecate `child-src` and move workers to `worker-src` -> `script-src` -> `default-src`. The spec's already updated: https://w3c.github.io/webappsec-csp/#directive-child-src. Note also that `frame-src` has been undeprecated; not sure if y'all have already picked up that change.
Attachments
WIP for EWS data (5.28 KB, patch)
2022-03-25 13:47 PDT, Brent Fulgham 		ews-feeder: commit-queue-
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2021-09-30 13:04:28 PDT
<rdar://problem/83733875>
Brent Fulgham
Comment 2 2022-03-25 13:47:34 PDT
Created attachment 455797 [details] WIP for EWS data
Brent Fulgham
Comment 3 2022-09-14 14:36:01 PDT
Pull request: https://github.com/Webkit/WebKit/pull/4357
Brent Fulgham
Comment 4 2022-09-15 15:21:51 PDT
This was undeprecated: w3c/webappsec-csp#313
Brent Fulgham
Comment 5 2022-09-15 15:22:27 PDT
https://github.com/w3c/webappsec-csp/pull/313 "The inheritance we ended up going with is worker-src -> child-src -> script-src -> default-src."
Note You need to log in before you can comment on or make changes to this bug.