Bug 93468

Summary: Until CSP fully supports paths, we should log a warning if we encounter a source with a path.
Product: WebKit Reporter: Mike West <mkwst>
Component: WebCore Misc.Assignee: Mike West <mkwst>
Status: RESOLVED FIXED    
Severity: Normal CC: abarth, eric.carlson, feature-media-reviews, webkit.review.bot
Priority: P2 Keywords: WebExposed
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on:    
Bug Blocks: 93197    
Attachments:
Description Flags
Patch none

Mike West
Reported 2012-08-08 05:35:16 PDT
`script-src http://example.com/path` is valid in CSP 1.0, but will likely have a different effect in CSP 1.1. As discussed in http://crbug.com/128493, we should log a warning to ensure that developers don't inadvertently rely on the path-ignoring behavior of 1.0.
Attachments
Patch (26.12 KB, patch)
2012-08-08 06:25 PDT, Mike West 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Mike West
Comment 1 2012-08-08 06:25:51 PDT
Created attachment 157200 [details] Patch
Mike West
Comment 2 2012-08-08 06:27:20 PDT
The first of potentially several logging additions, now that the refactoring in bug 93205 landed. :) WDYT, Adam?
Mike West
Comment 3 2012-08-08 08:16:24 PDT
Comment on attachment 157200 [details] Patch Ha. That was easy. You're getting lax! :) CQ?
Adam Barth
Comment 4 2012-08-08 10:01:24 PDT
Comment on attachment 157200 [details] Patch nah, you've just learned all my bug-a-boos.
WebKit Review Bot
Comment 5 2012-08-08 10:24:57 PDT
Comment on attachment 157200 [details] Patch Clearing flags on attachment: 157200 Committed r125047: <http://trac.webkit.org/changeset/125047>
WebKit Review Bot
Comment 6 2012-08-08 10:25:01 PDT
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.