Re: Trigger a DOM event/error when a CSP violation happens. from Dan Veditz on 2012-10-26 (public-webappsec@w3.org from October 2012)

From: Dan Veditz <dveditz@mozilla.com>
Date: Fri, 26 Oct 2012 16:22:09 -0700
To: Eduardo' Vela <evn@google.com>
CC: John J Barton <johnjbarton@johnjbarton.com>, Adam Barth <w3c@adambarth.com>, "public-webappsec@w3.org" <public-webappsec@w3.org>
Message-ID: <508B1B21.30800@mozilla.com>

On 10/26/12 4:16 PM, Eduardo' Vela wrote:
> If we can't debug the origin of the alert, it's impossible for us to
> differentiate an attack from a bug like this.

Sure, but you're more likely to get a faster fix for a bug acknowledged 
by both Mozilla and Google than to get a new DOM Event feature added to 
the next revision of the spec when we haven't even published the current 
version.

Received on Friday, 26 October 2012 23:22:38 UTC