Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Based on the discussion in w3c/webappsec-csp#146, this patch makes two substantive changes: 1. 'worker-src' now defers to 'script-src', not 'child-src'. 2. Dedicated workers now always inherit their policy from the context that created the worker. Hopefully this makes more sense, and we won't change it again in a month.
- Loading branch information