- From: Brandon Sterne <bsterne@mozilla.com>
- Date: Thu, 09 Jun 2011 16:16:24 -0700
- To: Adam Barth <w3c@adambarth.com>
- CC: Boris Zbarsky <bzbarsky@mit.edu>, gaz Heyes <gazheyes@gmail.com>, "sird@rckc.at" <sird@rckc.at>, public-web-security@w3.org
On 06/09/2011 04:08 PM, Brandon Sterne wrote: > On 03/29/2011 06:58 PM, Adam Barth wrote: >> WebKit literally checks for callable: >> >> http://trac.webkit.org/browser/trunk/Source/WebCore/bindings/js/ScheduledAction.cpp#L53 >> >> Anyway, that's something for HTML5 or WebIDL to define. What's >> important for our purposes is that there's a branch there and we need >> to block on side of the branch but not the other (as in >> https://bugs.webkit.org/attachment.cgi?id=87220&action=prettypatch) > > I just pushed a change to address this issue: > https://dvcs.w3.org/hg/content-security-policy/rev/6a8f36118103 See also this changeset: https://dvcs.w3.org/hg/content-security-policy/rev/f38045110ecc Cheers, Brandon
Received on Thursday, 9 June 2011 23:16:18 UTC