W3C home > Mailing lists > Public > public-webappsec@w3.org > March 2013

Re: CSP: error handling

From: Anne van Kesteren <annevk@annevk.nl>
Date: Mon, 18 Mar 2013 15:12:43 +0000
Message-ID: <CADnb78gfGHPDNuF0WP8z4ShYZ9TPj0LQHyGb+SxKgPms3QY2Pw@mail.gmail.com>
To: "Hill, Brad" <bhill@paypal-inc.com>
Cc: Mike West <mkwst@google.com>, "dveditz@mozilla.com" <dveditz@mozilla.com>, Ian Melven <imelven@mozilla.com>, WebAppSec WG <public-webappsec@w3.org>
On Mon, Mar 18, 2013 at 2:42 PM, Hill, Brad <bhill@paypal-inc.com> wrote:
> Will this cause retries, even though the intent is not to load the content?

For EventSource it would, yes.

For XMLHttpRequest though I think I would prefer an error event or
NetworkError exception (in case of synchronous) if the request failed
because of this rather than load coupled with status 400...

Received on Monday, 18 March 2013 15:13:14 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:54:31 UTC