Worker / SharedWorker directive

My fault: removed Worker/SharedWorker from 'script-src' in
https://github.com/w3c/webappsec/commit/ad525f13d111ba366b4fae9678b6097e5ee829ad
.

Note that 'importScripts' should still be controlled by the 'script-src'
directive of whatever policy the Worker is running with.

-mike

On Thu Apr 24 2014 at 5:11:05 PM, Anne van Kesteren <annevk@annevk.nl>
wrote:

> Is it child-src or script-src? Specification lists them under both.
>
>
> --
> http://annevankesteren.nl/
>
>