forked from mirrors/gecko-dev
Despite what the comment here says, there is nowhere in the W3C CSP spec stating that frame-ancestors should be ignored in report-only mode.
1 line
103 B
Text
1 line
103 B
Text
Content-Security-Policy-Report-Only: frame-ancestors 'none'; report-uri http://mochi.test:8888/foo.sjs
|