Effective directive routes non-script-like request through script-src-elem

[notriddle]

According to https://www.w3.org/TR/CSP/#effective-directive-for-a-request, XSLT documents should be checked as script.

The first check for all script-src-elem checks, however, is to check if the request is script-like as defined by fetch. Fetch does not define XSLT as a script-like check https://fetch.spec.whatwg.org/#request-destination-script-like, which makes the entire thing a no-op always-allow rule.

Is that the intent here?

[notriddle]

Stupid. Stupid, stupid, stupid.

There's a big freaking warning right underneath it that says how it's supposed to be used. How did I miss that?!