Re: Content Security Policy and WebDriver

On Mon, Nov 3, 2014 at 7:55 PM, Jim Evans <james.h.evans.jr@gmail.com> wrote:
> If I'm reading things properly, a browser that implements the Content Security
> Policy spec browsing a site that has a Content Security Policy can entirely
> disable the execution of anonymous JavaScript. This would entirely break the
> executeScript and executeAsyncScript commands[1].

I don't think it will since drivers usually operate with elevated
security permissions, and always from localhost.  As I understand it
there's no way in CSP to disable execution of scripts from self?

Received on Monday, 3 November 2014 20:04:14 UTC