IssueRaiser

Proposal: define default for all

I propose `Feature-Policy` adopt `Content-Security-Policy` concept and be able to define all default, example: Feature-Policy: default 'none' Feature-Policy: default 'none'; fullscreen 'self' where similarity in CSP would be Content-Security-Policy: default-src 'none' Content-Security-Policy: default-src 'none'; img-src 'self' Otherwise we would be stuck to define all features separately, and since the features list will grow more and more, without the global default it likely will harmful web.

Posted by laukstein on Jul 17, 2018, 8:49 AM

Tags

Related issues

Raise real-world problems, find people facing the same issue, and discuss solutions.4,000 issues0 comments

github (Other)

Proposal: define default for all

lauksteinJul 17, 2018, 8:49 AM

I propose `Feature-Policy` adopt `Content-Security-Policy` concept and be able to define all default, example: Feature-Policy: default 'none' Feature-Policy: default 'none'; fullscreen 'self' where similarity in CSP would be Content-Security-Policy: default-src 'none' Content-Security-Policy: default-src 'none'; img-src 'self' Otherwise we would be stuck to define all features separately, and since the features list will grow more and more, without the global default it likely will harmful web.

Comments (0)

No comments yet. Start the discussion.

Comment on this issue