ISSUE-35: Should we add an "httpOnly" like directive to CSP to indicate that the state of this policy is not available to the script APIs?

ISSUE-35: Should we add an "httpOnly" like directive to CSP to indicate that the state of this policy is not available to the script APIs?

http://www.w3.org/2011/webappsec/track/issues/35

Raised by: 
On product:

Received on Friday, 2 November 2012 09:08:51 UTC