On 7/6/09 10:58 AM, Brandon Sterne wrote:
> I think we should change the script-src directive to only apply to
> external stylesheet loads and let inline styles (<style> elements and
> style attributes) behave as they currently do.

That should have been "style-src directive".

-Brandon
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

Reply via email to