Skip to content

Commit

Permalink
Change the model for workers.
Browse files Browse the repository at this point in the history
Based on the discussion in w3c/webappsec-csp#146, this
patch makes two substantive changes:

1. 'worker-src' now defers to 'script-src', not 'child-src'.
2. Dedicated workers now always inherit their policy from the context that
   created the worker.

Hopefully this makes more sense, and we won't change it again in a month.
  • Loading branch information
ryandel8834 authored and ryandel8834 committed Nov 29, 2016
1 parent ed6268c commit eb584ee
Show file tree
Hide file tree
Showing 2 changed files with 106 additions and 69 deletions.
Loading

0 comments on commit eb584ee

Please sign in to comment.