CSP-Bypass icon indicating copy to clipboard operation
CSP-Bypass copied to clipboard

Lack of Support for Depreciated xhr-src

Open mandatoryprogrammer opened this issue 7 years ago • 1 comments

While using this library in another project I noticed it throws a ValueError when a CSP makes use of the xhr-src directive.

According to MDN:

Prior to Firefox 23, xhr-src was used in place of the connect-src directive and only restricted the use of XMLHttpRequest.

Any interest in adding support for this?

mandatoryprogrammer avatar May 28 '18 20:05 mandatoryprogrammer

Yea, need to add CSP level 2 headers too.

moloch-- avatar May 28 '18 22:05 moloch--