Re: CSP sandboxing and workers

I could certainly see value in sandboxing a worker, at least for the
'allow-same-origin' bits. I'm not sure how applicable the other flags are.

-mike


On Sun, Jun 1, 2014 at 10:04 AM, Anne van Kesteren <annevk@annevk.nl> wrote:

> We should note in the specification that sandboxing only has effect
> when CSP applies to a global environment associated with a browsing
> context. It wouldn't apply to workers or e.g. a document fetched
> through XMLHttpRequest.
>
> However, we might want to have it apply to workers, maybe we should
> introduce that?
>
>
> --
> http://annevankesteren.nl/
>
>