Re: [webrtc-extensions] Add a CSP check to RTCPeerConnection.addIceCandidate(). (#81)

The port restrictions apply to all connections, yes. Not all ports are blocked though. Are you suggesting there are code paths specifically for non-blocked ports? That sounds rather wonky.

It's not clear to me we want to reveal the CSP restrictions directly to a potential attacker. If the website wanted to convey its CSP policy it can already, right?

-- 
GitHub Notification of comment by annevk
Please view or discuss this issue at https://github.com/w3c/webrtc-extensions/pull/81#issuecomment-978964563 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Thursday, 25 November 2021 08:47:59 UTC