Re: [ServiceWorker] SW spec never hooks into the "runs a worker" term that the CSP spec uses to enforce CSPs (#378)

I brought the text from CSP spec to SW Security Considerations section for now: https://slightlyoff.github.io/ServiceWorker/spec/service_worker/#content-security. When things are settled on CSP.next, we may just link to CSP. Note that the origin's globally unique identifier check step is omitted as the script's origin should not be a globally unique identifier once it gets to the point where it can invoke Run Service Worker algorithm.

Closing.

---
Reply to this email directly or view it on GitHub:
https://github.com/slightlyoff/ServiceWorker/issues/378#issuecomment-128631316