New answers tagged xss
0
votes
CSP: Allow inline scripts while blocking javascript: in iframe src
This is not currently possible.
I created an issue to request it: Possibility to block all javascript: URLs · Issue #658 · w3c/webappsec-csp
- 33.1k
Top 50 recent answers are included