Bug 182285 - Resources are still loaded when blocked by CSP
Summary: Resources are still loaded when blocked by CSP
Status: RESOLVED CONFIGURATION CHANGED
Alias: None
Product: WebKit
Classification: Unclassified
Component: Page Loading (show other bugs)
Version: Safari Technology Preview
Hardware: Mac macOS 10.13
: P2 Normal
Assignee: Nobody
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2018-01-30 04:14 PST by Scott Helme
Modified: 2022-02-08 12:13 PST (History)
4 users (show)

See Also:

Attachments
Console showing CSP and 404 error. (163.70 KB, image/png)
2018-01-30 04:14 PST, Scott Helme 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Scott Helme 2018-01-30 04:14:34 PST 
Created attachment 332647 [details]
Console showing CSP and 404 error.

I have a CSP on this page: https://scotthelme.co.uk/csp-test/

The page is supposed to blocked the loading of the script file which it does and puts the appropriate CSP error in the console.

The problem is that it still seems to request the file and throws a 404 error for the asset. 

This request should not be made as it places the browser in violation of the CSP.
Comment 1 Radar WebKit Bug Importer 2018-01-31 09:37:18 PST 
<rdar://problem/37073699>
Comment 2 Brent Fulgham 2022-02-08 12:13:26 PST 
We believe this is now functioning correctly. Please let us know if you are still experiencing any issues.