From 6c6ad61331fed85ffc2f37876b90a8eae15b037e Mon Sep 17 00:00:00 2001 From: Karttekay Date: Sat, 10 Feb 2024 09:29:44 +0530 Subject: [PATCH] updated csp directive with latest values --- fetch.bs | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/fetch.bs b/fetch.bs index 58579420d..038bec931 100644 --- a/fetch.bs +++ b/fetch.bs @@ -1803,11 +1803,11 @@ not always relevant and might require different behavior. HTML's navigate algorithm (top-level only). "frame" - child-src + frame-src HTML's <frame> "iframe" - child-src + frame-src HTML's <iframe> "" @@ -1839,15 +1839,15 @@ not always relevant and might require different behavior. cursor, CSS' list-style-image, … "audioworklet" - script-src + script-src-elem audioWorklet.addModule() "paintworklet" - script-src + script-src-elem CSS.paintWorklet.addModule() "script" - script-src + script-src-elem HTML's <script>, importScripts() "serviceworker" @@ -1871,7 +1871,7 @@ not always relevant and might require different behavior. import "..." with { type: "json" } "style" - style-src + style-src-elem HTML's <link rel=stylesheet>, CSS' @import, import "..." with { type: "css" } "track" @@ -1899,7 +1899,7 @@ not always relevant and might require different behavior. "prefetch" "" - default-src (no specific directive) + connect-src (no specific directive) HTML's <link rel=prefetch> "prerender" @@ -1907,7 +1907,7 @@ not always relevant and might require different behavior. "xslt" "xslt" - script-src + script-src-elem <?xml-stylesheet>