cordova-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Shazron <>
Subject [iOS/macOS 10] Updates to CSP support
Date Sat, 06 Aug 2016 11:32:57 GMT
"The latest WebKit builds and Safari Technology Preview now support all of
the features of the Content Security Policy Level 2 standard
<>, including hashes for script and
style elements."

- <script> and <style> hashes (browsers that support CSP , but do not
support CSP hashes will refuse to load the script or style, unless you use
the unsafe-inline keyword as well)

- More restrictive wildcard * (this is a backwards incompatible change)

  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message