Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Fix CSP source list intersection for CSPEE in blink
As explained in w3c/webappsec-cspee#18, Content-Security-Policy: Embedded Enforcement source list intersection algorithm sometimes computes a wrong intersection of two lists of source expressions. Additionally, blink CSPEE source intersection algorithm was computing a wrong intersection for http://*.com and http://*.example.com. We fix those problems and add a unit test and WP tests. Change-Id: Ie7b85d8c7e978af6b5e87141d257c66e5556be95
- Loading branch information