child-src now deprecated, use frame-src and worker-src instead
Closed this issue · 2 comments
Malvoz commented
I just wanted to give a heads up: the 'frame-src' has been undeprecated, while 'worker-src' has been added to the W3 spec and the child-src has been deprecated (still used as fallback for both 'worker-src' and 'frame-src', which in turn falls back to 'default-src').
Malvoz commented
Even though I don't expect this project to recieve any updates, I should leave this open for others to find.
pfreitag commented
Updated with CSP3 info