Add support table for CSP 3.0 compliance

[csabakabai]

First public version of CSP 3.0 is published at https://www.w3.org/TR/CSP3/ Would you please add a browser support table to that?

Thanks and regards, Csaba

[cvrebert]

• https://webkit.org/status/#specification-content-security-policy-level-3

[csabakabai]

Firefox status

[cvrebert]

• https://developer.microsoft.com/en-us/microsoft-edge/platform/status/csplevel3strictdynamicsourceexpression/

[cvrebert]

https://www.chromestatus.com/features#csp3

[Malvoz]

+1

[JaneX8]

+1 and in the security category please.

[BreakfastSerial]

+1 security header category!

[Zemnmez]

+1 this would be super useful

[paulirish]

csp support status as of now

• chrome: 96.7% - chromestatus
• edge: 96.5% - edge status
• firefox: 76.7% - mdn table
• webkit: 58.0% - webkit status

The percentages above reflect % passing CSP tests in Web Platform tests. (these tests are ALL csp, not just csp level 3)

since csp L3 has a bunch of new stuff, probably best to look to see the status of each feature/directive you're interested in. The MDN compat table looks pretty comprehensive.

[GPHemsley]

It may be more efficient to track individual changes from CSP2: https://www.w3.org/TR/CSP3/#changes-from-level-2

And, indeed, many of these changes are now covered by MDN data: https://caniuse.com/mdn-http_headers_csp_content-security-policy_worker-src https://caniuse.com/mdn-http_headers_csp_content-security-policy_manifest-src https://caniuse.com/mdn-http_headers_csp_content-security-policy_report-to etc.