[Bug 22752] [imports]: Imports should respect CSP

https://www.w3.org/Bugs/Public/show_bug.cgi?id=22752

--- Comment #1 from Morrita Hajime <morrita@google.com> ---
As discussed at https://codereview.chromium.org/19940002/,

> For Q2:
> It should follow master's policy, not parent's
> This is because the script runs on the master's scripting context.

I was convinced that Each import should respect its own CSP, rather than one of
the master.
The rationale is that:

- It is confusing when the document behaves differently when
  it is loaded as import and it is loaded as usual (as a frame).
  Such parity should be minimized.
- If the master want protect itself, it should just block imports being loaded.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.

Received on Thursday, 25 July 2013 00:33:59 UTC