Re: [w3c/manifest] Which CSP policy should apply to images inside an app manifest? (#851) from Mathieu Hofman on 2020-04-01 (public-webapps-github@w3.org from April 2020)

From: Mathieu Hofman <notifications@github.com>
Date: Wed, 01 Apr 2020 15:13:55 -0700
To: w3c/manifest <manifest@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <w3c/manifest/issues/851/607516044@github.com>

I personally see the Payment Handler as a sort of popup, with its own owner document. With that in mind, I do not believe the page's CSP should apply to the resources needed for the Payment Handler.

I think it would make more sense for the CSP of the resource containing the `payment-method-manifest` link to apply.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/issues/851#issuecomment-607516044

Received on Wednesday, 1 April 2020 22:14:10 UTC