118
edits
Security/CSP/AllowedScripts: Difference between revisions
Jump to navigation
Jump to search
→Syntax
(→Syntax) |
(→Syntax) |
||
| Line 9: | Line 9: | ||
origin-list = origin-descriptor [ 1*SP origin-list] | origin-list = origin-descriptor [ 1*SP origin-list] | ||
origin-descriptor = "none" / "self" / "*" / origin | origin-descriptor = "none" / "self" / "*" / origin | ||
origin | origin = <as defined by draft-abarth-origin> | ||
</pre> | </pre> | ||
The user agent MUST ignore any X-Allowed-Scripts header fields occurring in an HTML meta tag or in the Trailer headers. | The user agent MUST ignore any X-Allowed-Scripts header fields occurring in an HTML meta tag or in the Trailer headers. | ||