W3C home > Mailing lists > Public > public-webappsec@w3.org > November 2014

Re: Should CSP affect a Notification icon?

From: Brian Smith <brian@briansmith.org>
Date: Sun, 9 Nov 2014 15:26:53 -0800
Message-ID: <CAFewVt5y8gnew-m3-bWKuRSXhDsMuU2P7rFom7prY2tvsuSa2A@mail.gmail.com>
To: Daniel Veditz <dveditz@mozilla.com>
Cc: "public-webappsec@w3.org" <public-webappsec@w3.org>
On Sun, Nov 9, 2014 at 3:25 PM, Brian Smith <brian@briansmith.org> wrote:
> It seems reasonable to me to use image-src for that.

Also, even if image-src is not appropriate, then shouldn't default-src
cover everything else unless explicitly stated otherwise?

Cheers,
Brian
Received on Sunday, 9 November 2014 23:27:20 UTC

This archive was generated by hypermail 2.3.1 : Monday, 23 October 2017 14:54:07 UTC