> On Sep 22, 2017, at 4:24 PM, Anne van Kesteren <[email protected]> wrote: > > On Fri, Sep 22, 2017 at 4:18 PM, Christoph Kerschbaumer > <[email protected]> wrote: >> We plan to ship the CSP directive worker-src within Firefox 58. > > Will we also start enforcing script-src for workers? It seems good > that if you restrict script it actually stops all scripts.
If worker-src is not present in an enforced policy, but script-src is, then yes. _______________________________________________ dev-platform mailing list [email protected] https://lists.mozilla.org/listinfo/dev-platform
