Changes

Jump to: navigation, search

Security/CSP/Specification

No change in size, 17:21, 14 June 2010
m
MUST NOT!
</font>
<font color="#060">
* User Agents MUST not NOT block:
** Functions declared using the function operator, e.g. function f() { some_code }, or var f = function() { some_code }
** calls to setTimeout using a Function argument, e.g. setTimeout(myFunc, 1000)
</font>
<font color="#060">
* User Agents MUST not NOT block:
** data: URIs when used as a source for inline content explicitly allowed by the protected document's policy.
</font>
</font>
<font color="#060">
* User Agents MUST not NOT block:
** XBL bindings loaded via the chrome: or resource: protocols
</font>
Canmove, confirm
1,537
edits

Navigation menu