CSP: 'violated-directive' should match 'effective-directive'.
In , mikispag@ noted that we're currently returning the entire
text of the violated directive, including its source list, etc. This
information is replicated in the report via the 'original-policy'
property, and CSP3 defines both 'violated-directive' and
'effective-directive' to contain the same data.
This patch changes our implementation in line with the spec.
30 files changed