You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
* Is the header supported by any user agent? If so, which?
8
+
* What does it do?
9
+
* What are the valid values for the header?
10
+
* Where does the specification live?
11
+
12
+
## Adding a new CSP directive
13
+
14
+
* Is the directive supported by any user agent? If so, which?
15
+
* What does it do?
16
+
* What are the valid values for the directive?
17
+
18
+
---
19
+
20
+
# Bugs
21
+
22
+
Console errors and deprecation warnings are considered bugs that should be addressed with more precise UA sniffing. Bugs caused by incorrect or invalid UA sniffing are also bugs.
23
+
24
+
### Expected outcome
25
+
26
+
Describe what you expected to happen
27
+
28
+
1. I configure CSP to do X
29
+
1. When I inspect the response headers, the CSP should have included X
30
+
31
+
### Actual outcome
32
+
33
+
1. The generated policy did not include X
34
+
35
+
### Config
36
+
37
+
Please provide the configuration (`SecureHeaders::Configuration.default`) you are using including any overrides (`SecureHeaders::Configuration.override`).
0 commit comments