Problem/Motivation
To prepare for changing the behaviour of handing 'none' in a directive's values in CSP 2.0, reduceSourceList() should throw a deprecation warning if a directive contains 'none' alongside other sources (except valid keywords like 'report-sample')
Steps to reproduce
Proposed resolution
If a directive contains 'none' alongside other sources (domains, protocols, 'unsafe-inline', etc), throw a deprecation warning that a site should remove any undesired sources.
Remaining tasks
Create change record with info on upcoming change in 2.0, and how to address warning in 8.x-1.x.
User interface changes
API changes
Data model changes
Issue fork csp-3410710
Show commands
Start within a Git clone of the project using the version control instructions.
Or, if you do not have SSH keys set up on git.drupalcode.org:
Comments
Comment #4
gapple