Security/CSP/AllowedScripts: Difference between revisions

Jump to navigation Jump to search
No edit summary
Line 9: Line 9:
origin-list            = origin-descriptor [ 1*SP origin-list]
origin-list            = origin-descriptor [ 1*SP origin-list]
origin-descriptor      = "none" / "self" / "*" / origin
origin-descriptor      = "none" / "self" / "*" / origin
origin         = <as defined by draft-abarth-origin>
origin                             = <as defined by draft-abarth-origin>
</pre>  
</pre>  
The user agent MUST ignore any X-Allowed-Scripts header fields occurring in an HTML meta tag or in the Trailer headers.
The user agent MUST ignore any X-Allowed-Scripts header fields occurring in an HTML meta tag or in the Trailer headers.
118

edits

Navigation menu