Referrer vs CSP from Anne van Kesteren on 2014-08-16 (public-webappsec@w3.org from August 2014)

From: Anne van Kesteren <annevk@annevk.nl>
Date: Sat, 16 Aug 2014 08:16:55 +0200
To: WebAppSec WG <public-webappsec@w3.org>
Message-ID: <CADnb78gH5GFXh+dd7QgUTZPFWuY7fAaOT5zhYO8sHAEcfErqsw@mail.gmail.com>

It seems that Referrer Policy needs to define the CSP bits itself if
it wants to replace that part of the CSP specification, no? Or at
least CSP needs to acknowledge that it only controls the syntax and
point back somehow.


-- 
http://annevankesteren.nl/

Received on Saturday, 16 August 2014 06:17:23 UTC