From 7e8a5367d1e0d9c1b7e84d2c86e7821af0ff167a Mon Sep 17 00:00:00 2001 From: Mike West Date: Wed, 21 Oct 2015 13:58:37 +0200 Subject: [PATCH] Update CSP links The CSP specification has moved. This patch updates links accordingly, and takes the opportunity to rename an algorithm and remove a referenced directive that no longer exists. whatwg/html#271 --- source | 22 ++++++++++------------ 1 file changed, 10 insertions(+), 12 deletions(-) diff --git a/source b/source index 68ae2bbff00..874c4201ae8 100644 --- a/source +++ b/source @@ -3506,15 +3506,14 @@ a.setAttribute('href', 'http://example.com/'); // change the content attribute d

The following terms are defined in Content Security Policy:

@@ -12903,11 +12902,10 @@ people expect to have work and what is necessary. attribute, or if that attribute's value is the empty string, then abort these steps.

  • Let policy be the result of executing Content Security Policy's parse - the policy algorithm on the meta element's + a serialized Content Security Policy algorithm on the meta element's content attribute's value.

  • Remove all occurrences of the reflected-xss, report-uri, frame-ancestors, and sandbox CP50220, Y. Naruse. IANA.

    [CSP]
    -
    Content Security Policy, M. West, A. Barth, D. Veditz. W3C.
    +
    Content Security Policy, M. West, D. Veditz. W3C.
    [CSS]
    Cascading Style Sheets Level 2 Revision 2, B. Bos, T. Çelik, I. Hickson, H. Lie. W3C.