search

google / csp-evaluator

https://csp-evaluator.withgoogle.com
Apache License 2.0
335 stars 46 forks source link

prefetch-src is deprecated and isn't reported on #69

Closed Rockerby closed 1 month ago

Rockerby commented 1 month ago

As mentioned in https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/prefetch-src the prefetch-src directive is now deprecated and should be flagged.

A new check should be added to address this.

lweichselbaum commented 1 month ago

Thank you @Rockerby!