Re: CSP script hashes, inline and src'd

• From: Yoav Weiss <yoav@yoav.ws>
• Date: Sat, 19 Oct 2013 23:52:38 +0200
• To: Garrett Robinson <grobinson@mozilla.com>
• Cc: "public-webappsec@w3.org" <public-webappsec@w3.org>
• Message-ID: <CACj=BEgpH=JXUK3qML5BQXYw=cEHr9JPHkHr3HvcY2Qj45TV1Q@mail.gmail.com>

As one of the supporters of script/style hashes, I have no use case for
external script/style hashes, only for inline ones.

Received on Saturday, 19 October 2013 21:53:05 UTC