Re: CSP2: Drop 'unsafe-redirect'.

On Wed, Jul 1, 2015 at 4:12 PM, Mike West <mkwst@google.com> wrote:
> Experimentation locally on internal sites leads me to believe that it's not
> going to be web compatible: I didn't find any Google property that used CSP
> which the new behavior wouldn't break in some way.

How are we going to protect the scenario instead?


-- 
https://annevankesteren.nl/

Received on Wednesday, 1 July 2015 14:25:46 UTC