9163790b7c
frame-ancestors doesn't fall back to default-src. So when we apply a very restricted CSP we should make sure to set it to 'none' and not leave it empty. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl> |
||
|---|---|---|
| .. | ||
| ContentSecurityPolicyTest.php | ||
| DataResponseTest.php | ||
| DispatcherTest.php | ||
| DownloadResponseTest.php | ||
| EmptyContentSecurityPolicyTest.php | ||
| EmptyFeaturePolicyTest.php | ||
| FeaturePolicyTest.php | ||
| FileDisplayResponseTest.php | ||
| HttpTest.php | ||
| JSONResponseTest.php | ||
| OutputTest.php | ||
| PublicTemplateResponseTest.php | ||
| RedirectResponseTest.php | ||
| RequestStream.php | ||
| RequestTest.php | ||
| ResponseTest.php | ||
| StreamResponseTest.php | ||
| TemplateResponseTest.php | ||