To clarify: your example is supposed to be an attack on imported.com, not example.com (we can assume the attacker has control over example.com)?
Nick
- [HTML imports]: Imports and Content Security Policy Frederik Braun
- Re: [HTML imports]: Imports and Content Security Pol... Hajime Morrita
- Re: [HTML imports]: Imports and Content Security... Frederik Braun
- Re: [HTML imports]: Imports and Content Secu... Hajime Morrita
- Re: [HTML imports]: Imports and Content ... Nick Krempel
- Re: [HTML imports]: Imports and Con... Frederik Braun
- Re: [HTML imports]: Imports and... Nick Krempel
- Re: [HTML imports]: Imports and Content Security Pol... Gabor Krizsanits
- Re: [HTML imports]: Imports and Content Security... Scott Miles
- Re: [HTML imports]: Imports and Content Secu... Nick Krempel
- Re: [HTML imports]: Imports and Content ... Gabor Krizsanits
- Re: [HTML imports]: Imports and Con... Hajime Morrita
- Re: [HTML imports]: Imports and... Frederik Braun
- Re: [HTML imports]: Imports... Hajime Morrita
- Re: [HTML imports]: Imports... Frederik Braun
