On 3/27/13 12:27 PM, Devdatta Akhawe wrote:
I thought the script-nonce directive uses `nonce' attribute that should only contain the nonce and nothing else.
That could well be, but Jeremy was explicitly asking about the 'class' attribute...
If you just want to check that the value of an attribute is something in particular, use AttrValueIS.
-Boris _______________________________________________ dev-security mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security
