W3C home > Mailing lists > Public > public-webappsec@w3.org > April 2013

Re: CSP and `picture`

From: Daniel Veditz <dveditz@mozilla.com>
Date: Wed, 24 Apr 2013 19:25:11 -0700
Message-ID: <51789407.5090803@mozilla.com>
To: Adam Barth <w3c@adambarth.com>
CC: Frederik Braun <fbraun@mozilla.com>, "public-webappsec@w3.org" <public-webappsec@w3.org>
On 4/20/2013 4:34 PM, Adam Barth wrote:
>      > Personally, I believe it would be easier for authors if the
>     directive is
>      > `img-src` (rather than `media-src`)
> That makes sense to me as well.

Me too, the picture element is clearly meant as a "better IMG" replacement.

"What we want to do is have the picture behave exactly the same as an 
img element, but with the only difference being that it is source 
elements is used to determine the value of the src IDL attribute"

Until there's native browser support sites will rely on polyfill 
libraries which implement this using IMG, and thus fall under img-src 

-Dan Veditz

Received on Thursday, 25 April 2013 02:25:43 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:54:32 UTC