W3C home > Mailing lists > Public > public-webappsec@w3.org > October 2013

Are CSP directives case insensitive?

From: John Wong <gokoproject@gmail.com>
Date: Mon, 28 Oct 2013 15:29:32 -0400
Message-ID: <CACCLA5747vPHO4CZGgcfzgg28YSFsFS7aVmNPZu4zd578iQJsg@mail.gmail.com>
To: public-webappsec@w3.org
Hi,

The UA algorithm states we can take source expressions case insensitive.
What about directive names themselves? For example, 'self' and 'SELF' are
acceptable. [1]

> If the source expression is a case insensitive match for 'self'(including the quotation marks)

[1]: http://www.w3.org/TR/CSP/#parsing-1

Thanks.

Yeuk Hon
Received on Wednesday, 30 October 2013 08:28:48 UTC

This archive was generated by hypermail 2.3.1 : Monday, 23 October 2017 14:54:03 UTC