RESOLVED FIXED 156322
Treat CSP level 2 connect-src violations as network errors
https://bugs.webkit.org/show_bug.cgi?id=156322
Summary Treat CSP level 2 connect-src violations as network errors
John Wilander
Reported 2016-04-06 17:14:32 PDT
As Alex Christensen points out in https://bugs.webkit.org/show_bug.cgi?id=153598#c27, we should fire an error event and not throw an exception for asynchronous requests that violate CSP. For synchronous events we should throw a NetworkError. The details can be found here: https://www.w3.org/TR/XMLHttpRequest/#network-error
Attachments
Radar WebKit Bug Importer
Comment 1 2016-05-27 12:09:18 PDT
John Wilander
Comment 2 2016-07-14 17:43:21 PDT
This was eventually addressed in https://trac.webkit.org/changeset/199221 which is the patch for https://bugs.webkit.org/show_bug.cgi?id=153598.
Note You need to log in before you can comment on or make changes to this bug.