-
Notifications
You must be signed in to change notification settings - Fork 22.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix CSP example explanation #34286
Fix CSP example explanation #34286
Conversation
Preview URLs (comment last updated: 2024-06-20 17:15:04) |
files/en-us/web/http/csp/index.md
Outdated
|
||
```http | ||
Content-Security-Policy: default-src 'self' *.example.com; img-src * | ||
``` | ||
|
||
Note that this example doesn't specify a {{CSP("script-src")}}; with the example CSP, | ||
this site uses the setting specified by the {{CSP("default-src")}} directive, which means that scripts can be loaded only from the originating server. | ||
this site uses the setting specified by the {{CSP("default-src")}} directive. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What do you think about this?
this site uses the setting specified by the {{CSP("default-src")}} directive. | |
so the {{CSP("default-src")}} directive will be used for JavaScript sources as a fallback. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM with one minor reword if you think it's clearer. Thank you!
Thanks, Josh! |
Fix #8137