W3C home > Mailing lists > Public > public-webappsec@w3.org > July 2012

Re: script and data uri

From: John J Barton <johnjbarton@johnjbarton.com>
Date: Thu, 19 Jul 2012 13:45:07 -0700
Message-ID: <CAFAtnWyrxdkDiiBFRJcSLcFW6Lxq+r-F_Gq2XDMRGxfqGq5K0Q@mail.gmail.com>
To: David Bruant <bruant.d@gmail.com>
Cc: "public-webappsec@w3.org" <public-webappsec@w3.org>
On Thu, Jul 19, 2012 at 1:35 PM, David Bruant <bruant.d@gmail.com> wrote:

> Hi,
>
> I was wondering what CSP says about data uri used in as script@src and
> Web Worker source.
>

FWIW, the Chrome extension system does not allow data: URIs.

jjb


>
> Thanks,
>
> David
>
>
Received on Thursday, 19 July 2012 20:46:25 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Thursday, 19 July 2012 20:46:26 GMT