commit | 1a6748ba9cfb1bb961e5f62580c30958bca5d55f | [log] [tgz] |
---|---|---|
author | mkwst <mkwst@chromium.org> | Mon Oct 24 11:05:58 2016 |
committer | Commit bot <commit-bot@chromium.org> | Mon Oct 24 11:08:10 2016 |
tree | 9f1bf3474caf38aef42a13df985185b483521b33 | |
parent | 18d3734940ccbc96eff5246e2d6235145d44a59e [diff] |
Remove the 'reflected-xss' directive from CSP. This was removed from CSP2, never added to CSP3, and will not ship in any other browser. We should remove it, as it is completely redundant with `X-XSS-Protection`, which is never going away. Intent to Remove: https://groups.google.com/a/chromium.org/forum/#!topic/blink-dev/gjB93RpF6JY R=jochen@chromium.org BUG=657737 Review-Url: https://codereview.chromium.org/2428473004 Cr-Commit-Position: refs/heads/master@{#427040}