Re: HTML Imports and CSP

(sorry for the poor by-hand quoting, lists.w3.org isn't quoting for me)

Mike West <mkwst@google.com>:
> the 'unsafe-static-inline' source expression that Adam proposed in
> https://code.google.com/p/chromium/issues/detail?id=393307#c7 seems like a
> reasonable first step.

I don't think this will be quite enough, since dynamically adding <link>s
to the document to trigger an import is a common pattern for deferred
loading of components, and for plug-in systems like what Atom.io is looking
to use imports for.

-Justin