Hey Everyone, within CSP2 workers used to be governed by the child-src directive [0]. CSP3 introduces the worker-src directive [1] wich governs Workers, SharedWorkers as well as ServiceWorkers. Please note that the child-src directive has been deprecated within CSP3 in favor of worker-src as well as frame-src.
For backwards compatibility child-src will still be enforced for: * workers (if worker-src is not explicitly specified) * frames (if frame-src is not explicitly specified) We plan to ship the CSP directive worker-src within Firefox 58. Overall progress will be tracked here [2]. Thanks, Christoph [0] https://www.w3.org/TR/CSP2/#directive-child-src [1] https://w3c.github.io/webappsec-csp/#directive-worker-src [2] https://bugzilla.mozilla.org/show_bug.cgi?id=1302667 _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
