- Issue created by @fengtan
- Status changed to Needs review
about 1 year ago 4:09pm 19 April 2023 - last update
about 1 year ago 32 pass - Status changed to RTBC
5 months ago 5:23pm 8 February 2024
#2689277: Add ability to configure the child-src CSP directive → added support for the CSP directive "child-src", and added this recommendation when editing the directive "frame-src" in the admin form:
This directive is deprecated and will be replaced by child-src. It is recommended to use the both the frame-src and child-src directives until all browsers you support recognize the child-src directive.
The preferred method is now to use "frame-src", see:
Remove the recommendation and leave the option to use both "frame-src" and "child-src" ? Both are valid: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Securi...