220724 – CSP: Consider dropping support for 'plugin-types'

NEW220724

CSP: Consider dropping support for 'plugin-types'

https://bugs.webkit.org/show_bug.cgi?id=220724

Summary CSP: Consider dropping support for 'plugin-types'

Antonio Sartori

Reported 2021-01-19 00:57:17 PST

There is a discussion on the Content Security Policy spec about removing the 'plugin-types' directive, which is not that helpful anymore since Flash support has been discontinued, see https://github.com/w3c/webappsec-csp/issues/394. Would WebKit be also interested in dropping that?

Attachments
Add attachment proposed patch, testcase, etc.

Radar WebKit Bug Importer

Comment 1 2021-01-21 18:15:13 PST

<rdar://problem/73478460>

Antonio Sartori

Comment 2 2021-02-19 04:36:46 PST

Notice that even if it looks like WebKit does not support plugin-types (https://wpt.fyi/results/content-security-policy/plugin-types?label=master&label=experimental&aligned, https://wpt.fyi/results/content-security-policy/plugin-types?sha=f207cfdd15&label=master&max-count=1), there seems to be some plugin-types related check in the code https://github.com/WebKit/WebKit/blob/main/Source/WebCore/html/HTMLPlugInImageElement.cpp#L304

Note You need to log in before you can comment on or make changes to this bug.

Status NEW

Resolution

Priority P2

Severity Normal

Classification Unclassified

Version WebKit Nightly Build

Hardware Unspecified

OS Unspecified

Product WebKit

Component New Bugs

Assignee

Nobody

Reported

2021-01-19 00:57 PST

Modified

2021-02-19 04:36 PST History

CC List

3 users Show

URL

Keywords InRadar

Depends on

Blocks