CSP and mixed content from Anne van Kesteren on 2014-04-30 (public-webappsec@w3.org from April 2014)

From: Anne van Kesteren <annevk@annevk.nl>
Date: Wed, 30 Apr 2014 14:29:58 +0100
To: WebAppSec WG <public-webappsec@w3.org>
Message-ID: <CADnb78htXrf1kLNOTKYw5dg112kO6k=nmW=9PpUQnnSb2ebRTg@mail.gmail.com>

I have this open issue on Fetch:
https://www.w3.org/Bugs/Public/show_bug.cgi?id=22262

I was wondering, once we have integration between Fetch and CSP, would
it make sense for CSP to define the mixed content blocking rules?
Fetch should give sufficient context to execute those rules, no? Would
be great to have it defined.


-- 
http://annevankesteren.nl/

Received on Wednesday, 30 April 2014 13:30:29 UTC