1 CONSOLE ERROR: line 1: Refused to create a worker from 'http://127.0.0.1:8000/se
curity/contentSecurityPolicy/resources/alert-fail.js' because it violates the fo
llowing Content Security Policy directive: "child-src 'none'". Note that 'worker
-src' was not explicitly set, so 'child-src' is used as a fallback.
2
3 SharedWorkers should be governed by 'child-src'.
4
5 On success, you will see a series of "PASS" messages, followed by "TEST COMPLETE
".
6
7
8 PASS var w = new SharedWorker('/security/contentSecurityPolicy/resources/alert-f
ail.js'); threw exception SecurityError: Failed to construct 'SharedWorker': Acc
ess to the script at 'http://127.0.0.1:8000/security/contentSecurityPolicy/resou
rces/alert-fail.js' is denied by the document's Content Security Policy..
Issue 2533313002: CSP: Move 'worker-src' onto 'script-src'
(Closed)
Created 4 years ago by Mike West
Modified 3 years, 6 months ago
Reviewers: jochen (gone - plz use gerrit), andypaicu, estark, foolip
Base URL:
Comments: 19