News for hackers. Stuff that matters.

A comment on HTTP Security headers you should be using. Parent comment

Re:HTTP Security headers you should be using by porges on Thursday January 23, 2014 @01:48PM (#7110207)
'inline' is also treated as a separate source. If your policy is 'self' that only means same-origin code is allowed to run, and inline JS is disabled.
[ Parent | on HN ]

There are no comments on this comment yet.