Problem/Motivation

To prepare for changing the behaviour of handing 'none' in a directive's values in CSP 2.0, reduceSourceList() should throw a deprecation warning if a directive contains 'none' alongside other sources (except valid keywords like 'report-sample')

Steps to reproduce

Proposed resolution

If a directive contains 'none' alongside other sources (domains, protocols, 'unsafe-inline', etc), throw a deprecation warning that a site should remove any undesired sources.

Remaining tasks

Create change record with info on upcoming change in 2.0, and how to address warning in 8.x-1.x.

User interface changes

API changes

Data model changes

Issue fork csp-3410710

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

Comments

gapple created an issue. See original summary.

  • gapple committed b90879a2 on 8.x-1.x
    Issue #3410710 by gapple: Throw deprecation warning if directive...
gapple’s picture

Issue summary: View changes
Status: Active » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.