CSP2/CSP3: Explicitly list schemes that do not match '*'.

w3c · Jan 20, 2015 · 8cbfd69 · 8cbfd69
1 parent d990789
commit 8cbfd69
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 4 deletions.
diff --git a/specs/CSP2/index.src.html b/specs/CSP2/index.src.html
@@ -1034,8 +1034,7 @@ <h4 id="match-source-expression">Matching Source Expressions</h4>
         <li>
           If the source expression a consists of a single U+002A ASTERISK
           character (<code>*</code>), and <var>url</var>'s <a>scheme</a> is not
-          of a type designating a <a>globally unique identifier</a>, (such as
-          <code>blob:</code>, <code>data:</code>, or <code>filesystem:</code>)
+          one of <code>blob</code>, <code>data</code>, <code>filesystem</code>,
           then return <em>does match</em>.
         </li>
 

diff --git a/specs/content-security-policy/index.src.html b/specs/content-security-policy/index.src.html
@@ -1052,8 +1052,7 @@ <h4 id="match-source-expression">Matching Source Expressions</h4>
         <li>
           If the source expression a consists of a single U+002A ASTERISK
           character (<code>*</code>), and <var>url</var>'s <a>scheme</a> is not
-          of a type designating a <a>globally unique identifier</a>, (such as
-          <code>blob:</code>, <code>data:</code>, or <code>filesystem:</code>)
+          one of <code>blob</code>, <code>data</code>, <code>filesystem</code>,
           then return <em>does match</em>.
         </li>