NWebsec / NWebsec

Security libraries for ASP.NET
https://www.nwebsec.com
BSD 3-Clause "New" or "Revised" License
544 stars 75 forks source link

Child-src being deprecated => how to declare worker-src ? #122

Closed lgmorand closed 6 years ago

lgmorand commented 6 years ago

Hi André,

lovely nugget, used it for months, we love it. In some browsers, we have some warning telling that child-src is becoming deprecated and has to be replaced by frame-src and worker-src

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/child-src#Browser_compatibility

If I found FrameSources(), I don't find anything about worker sources. Did I miss something

thx

klings commented 6 years ago

Hi @lgmorand, thanks for the kind feedback. No, you're not missing something. I'm in the process of merging the ASP.NET Core branch and the classic NWebsec branch. Once that's settled, I'll add it in the next release after that.

klings commented 6 years ago

Released

lgmorand commented 6 years ago

Thanks a lot @klings. I'm a gonna give a try with the new version :)