Content-Security-Policy

[wehowski]

I got the error in the js console: Unrecognized Content-Security-Policy directive 'prefetch-src'. In OIDplus.class.php I commented out: /* "prefetch-src" => array( "'self'", "blob:" ),*/` I'm not quite sure about this, first I thought it came from a plugin, but it also appears on the viathink-oidplus!?

[danielmarschall]

According to https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/prefetch-src , "prefetch-src" is non-standard and deprecated.

Deprecated are:

• CSP: block-all-mixed-content Deprecated

• CSP: plugin-types Non-standardDeprecated

• CSP: prefetch-src Non-standardDeprecated

• CSP: referrer Non-standardDeprecated

• CSP: report-uri Deprecated

Non-Standard and not deprecated:

• CSP: require-trusted-types-for Experimental

• CSP: trusted-types Experimental

TODO: Remove them from OIDplus::init()

[danielmarschall]

Fixed in SVN Rev 1304