Skip to content

docs(CSP): add note for schemeless source matching#21015

Merged
sideshowbarker merged 1 commit intomdn:mainfrom
bsmth:2460-CSP-schemeless-matches
Sep 23, 2022
Merged

docs(CSP): add note for schemeless source matching#21015
sideshowbarker merged 1 commit intomdn:mainfrom
bsmth:2460-CSP-schemeless-matches

Conversation

@bsmth
Copy link
Copy Markdown
Member

@bsmth bsmth commented Sep 23, 2022

This PR adds details for <host-source> and <scheme-source> matching in cases where <scheme-source> is missing. When omitted, the document origin's scheme is used and secure upgrades are allowed.

Related issues

Fixes #2460

@bsmth bsmth requested a review from a team as a code owner September 23, 2022 14:15
@bsmth bsmth requested review from teoli2003 and removed request for a team September 23, 2022 14:15
@github-actions github-actions bot added the Content:HTTP HTTP docs label Sep 23, 2022
@github-actions
Copy link
Copy Markdown
Contributor

Preview URLs

External URLs (1)

URL: /en-US/docs/Web/HTTP/Headers/Content-Security-Policy/Sources
Title: CSP source values

@sideshowbarker sideshowbarker merged commit 294475e into mdn:main Sep 23, 2022
@bsmth bsmth deleted the 2460-CSP-schemeless-matches branch July 18, 2023 09:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Content:HTTP HTTP docs

Projects

None yet

Development

Successfully merging this pull request may close these issues.

CSP sources no URL scheme is specified note

2 participants