Open rw-AntoniRoszak opened 1 year ago
This appears to be fixed in 2023.
Yes, but this is because in this case, CSP was moved to HTTP header. So the problem is no longer visible on the listed page. Unfortunately I don't know any other page that could be used for problem reproduction.
Steps:
Observation:
Expectation:
Problem appeared in commit a422b3aee91f34535990ffa7ba3aa5256dfb83da - when I check out master before this commit, the combined policy is analyzed properly.
CSP header data:
upgrade-insecure-requests; frame-ancestors 'self'
@april