forked from mirrors/gecko-dev
		
	 a8b72c7aa8
			
		
	
	
		a8b72c7aa8
		
	
	
	
	
		
			
			Despite what the comment here says, there is nowhere in the W3C CSP spec stating that frame-ancestors should be ignored in report-only mode.
		
			
				
	
	
		
			1 line
		
	
	
	
		
			103 B
		
	
	
	
		
			Text
		
	
	
	
	
	
			
		
		
	
	
			1 line
		
	
	
	
		
			103 B
		
	
	
	
		
			Text
		
	
	
	
	
	
| Content-Security-Policy-Report-Only: frame-ancestors 'none'; report-uri http://mochi.test:8888/foo.sjs
 |