W3C home > Mailing lists > Public > public-webappsec@w3.org > June 2014

Re: CSP sandboxing and workers

From: Anne van Kesteren <annevk@annevk.nl>
Date: Mon, 2 Jun 2014 18:08:44 +0200
Message-ID: <CADnb78jZHzksCK82gdH1h2=xb_-1qMrc1B3EcOG8+4iO0Tn-DA@mail.gmail.com>
To: Brad Hill <hillbrad@gmail.com>
Cc: Mike West <mike@mikewest.org>, WebAppSec WG <public-webappsec@w3.org>, Ian Hickson <ian@hixie.ch>
On Mon, Jun 2, 2014 at 6:04 PM, Brad Hill <hillbrad@gmail.com> wrote:
> Among "JavaScript global environment", "document environment",
> "dedicated worker environment", "shared worker
> environment", and "worker environment", where does CSP state live and
> what loads get to influence it?  Maybe a table would be helpful.

CSP is at the same level, roughly. Though there is some mixing when it
comes to nested environments.

Received on Monday, 2 June 2014 16:09:11 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:54:38 UTC