DescriptionRevert of Add CSP header for resources with an active policy (patchset #7 id:120001 of https://codereview.chromium.org/1009583003/)
Reason for revert:
This header is not a "simple" header, and is causing issues with CORS preflights. Reverting until we can work out a better way to do it.
Original issue's description:
> Add CSP header for resources with an active policy
>
> This change sends a `CSP: active` header as specified in
> https://w3c.github.io/webappsec/specs/content-security-policy/#csp-request-header.
>
> The header is sent on resource requests which the policy would effect
> (e.g. not sent on images if there is no img-src or default-src in the
> policy).
>
> Also fixed misspelling in the name of |addClientHintsIfNecessary|.
>
> BUG=452819
>
> Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=192293
TBR=jochen@chromium.org,estark@chromium.org
NOPRESUBMIT=true
NOTREECHECKS=true
NOTRY=true
BUG=452819
Patch Set 1 #
Created: 5 years, 7 months ago
(Patch set is too large to download)
Messages
Total messages: 6 (2 generated)
|