Bug 239862

Summary: CSP: Fix mixing strict-dynamic and unsafe-inline policies
Product: WebKit Reporter: Patrick Griffis <pgriffis>
Component: WebCore Misc.Assignee: Patrick Griffis <pgriffis>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, ews-watchlist, katherine_cheney, mkwst, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch none

Description Patrick Griffis 2022-04-28 11:54:18 PDT
If you have multiple policies, one including strict-dynamic and another with unsafe-inline, the unsafe-inline policy was incorrectly handled.
Comment 1 Patrick Griffis 2022-04-28 11:59:45 PDT
Created attachment 458540 [details]
Patch
Comment 2 EWS 2022-04-28 19:00:12 PDT
Committed r293603 (250109@main): <https://commits.webkit.org/250109@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 458540 [details].
Comment 3 Radar WebKit Bug Importer 2022-04-28 19:01:13 PDT
<rdar://problem/92500528>