Using CSP internally in Chrome

• From: Adam Barth <w3c@adambarth.com>
• Date: Thu, 14 Apr 2011 15:44:49 -0700
• To: public-web-security@w3.org
• Message-ID: <BANLkTi=VA8kZJtZFUn6Hi5fn_fyw0jv24A@mail.gmail.com>

This is slightly off-topic for this list, but I wanted to convey my
excitement that we've started using CSP to secure some of the
HTML-based UI in Chrome:

http://src.chromium.org/viewvc/chrome?view=rev&revision=81658

(As noted in the comment, the policy we're using right now is slightly
wonky because I haven't finished implementing CSP in WebKit yet.)

Adam

Received on Thursday, 14 April 2011 22:45:47 UTC