canmove, Confirmed users
1,537
edits
Security/CSP/Spec: Difference between revisions
m
→No inline scripts will execute
(→Source Expression List: port inheritance steps) |
|||
| Line 47: | Line 47: | ||
*# javascript: link injection | *# javascript: link injection | ||
*# HTML attribute injection | *# HTML attribute injection | ||
'''On Violation:''' a violation report will be sent with the <tt>violated-directive</tt> value set to "Base Restriction Violation: no inline scripts will execute.". | |||
==Code will not be created from strings== | ==Code will not be created from strings== | ||