foundeo/content-security-policy.com

frame-src is not deprecated

kevna opened this issue · 2 comments

kevna commented

The site says that frame-src is deprecated in favour of child-src when this is not the case

According to the W3C child-src is deprecated in favour of frame-src and worker-src

W3C: https://w3c.github.io/webappsec-csp/#directive-child-src

Just saw this as well. While frame-src was originally deprecated in favor of child-src, this was reversed.

Fixed