tree 7b2403492a0455f7b7201ce2a505de451e7e1d5a
parent cc4ca5bbe25751e48f46aeb4cc4232780732d3ea
author Paul Semel <paulsemel@chromium.org> 1655973808 -0700
committer Blink WPT Bot <blink-w3c-test-autoroller@chromium.org> 1655974751 -0700

[CSP] default-src with 'strict-dynamic' must discard 'unsafe-inline'

As per https://www.w3.org/TR/CSP3/#strict-dynamic-usage, 'unsafe-inline'
is ignored when 'strict-dynamic' is used with 'script-src' or
'default-src' directives.

Bug: 1329460
Change-Id: I48cb4c4e221a8d7defaad8b08f4d094d5b18681b
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3714438
Reviewed-by: Antonio Sartori <antoniosartori@chromium.org>
Commit-Queue: Arthur Sonzogni <arthursonzogni@chromium.org>
Reviewed-by: Arthur Sonzogni <arthursonzogni@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1017073}