[Bug 25566] [imports]: Supporting more than just the script-src CSP directive in imports.

https://www.w3.org/Bugs/Public/show_bug.cgi?id=25566

Anne <annevk@annevk.nl> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |annevk@annevk.nl

--- Comment #2 from Anne <annevk@annevk.nl> ---
A thing you could potentially do here is have gradations. E.g. you could still
allow loading HTML imports, but not execute their scripts.

Part of the problem here is that we do not really know what the declarative
version will look like...

-- 
You are receiving this mail because:
You are the QA Contact for the bug.

Received on Tuesday, 6 May 2014 12:39:39 UTC