> On Sep 22, 2017, at 4:24 PM, Anne van Kesteren <ann...@annevk.nl> wrote: > > On Fri, Sep 22, 2017 at 4:18 PM, Christoph Kerschbaumer > <ckers...@gmail.com> wrote: >> We plan to ship the CSP directive worker-src within Firefox 58. > > Will we also start enforcing script-src for workers? It seems good > that if you restrict script it actually stops all scripts.
If worker-src is not present in an enforced policy, but script-src is, then yes. _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
