Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://ryona.agency/objects/26e686f7-eab6-4254-bc8e-6eebd31cffd8"> (mint@ryona.agency)'s status on Friday, 26-May-2023 17:39:36 JST</a><a href="https://ryona.agency/users/mint" title="mint@ryona.agency"><img src="https://gnusocial.jp/avatar/1002-48-20220724171046.webp" width="48" height="48" alt="" style="position: absolute; left: 0; top: 0;"></a><div><a href="https://lain.com/objects/6f868334-fe1a-414a-b414-fb5cbd346c92" rel="in-reply-to">in reply to</a><ul><li></ul></div></section><article><a href="https://lain.com/users/lain">@lain</a> What about sandbox CSP? Does it have the same effect as script-src 'none'?<br><a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/sandbox" rel="nofollow noreferrer">https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/sandbox</a></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/1589984#notice-3134954">In conversation</a><time datetime="2023-05-26T17:39:36+09:00" title="Friday, 26-May-2023 17:39:36 JST">Friday, 26-May-2023 17:39:36 JST</time> <span>from <span><a href="https://ryona.agency/objects/26e686f7-eab6-4254-bc8e-6eebd31cffd8" rel="external" title="Sent from ryona.agency via ActivityPub">ryona.agency</a></span></span><a href="https://ryona.agency/objects/26e686f7-eab6-4254-bc8e-6eebd31cffd8">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: developer.mozilla.org</div><h5><a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/sandbox">CSP: sandbox - HTTP | MDN</a></h5><div> from <span>MozDevNet</span></div></header><div>The HTTP Content-Security-Policy (CSP)
  sandbox directive enables a sandbox for the requested
  resource similar to the  sandbox
  attribute. It applies restrictions to a page's actions including preventing popups,
  preventing the execution of plugins and scripts, and enforcing a same-origin policy.</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
(mint@ryona.agency)'s status on Friday, 26-May-2023 17:39:36 JST
in reply to
- on-lain ✔ᵛᵉʳᶦᶠᶦᵉᵈ
@lain What about sandbox CSP? Does it have the same effect as script-src 'none'?
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/sandbox
In conversationFriday, 26-May-2023 17:39:36 JST from ryona.agencypermalink
Attachments
1. Domain not in remote thumbnail source whitelist: developer.mozilla.org
  CSP: sandbox - HTTP | MDN
  from MozDevNet
  The HTTP Content-Security-Policy (CSP) sandbox directive enables a sandbox for the requested resource similar to the sandbox attribute. It applies restrictions to a page's actions including preventing popups, preventing the execution of plugins and scripts, and enforcing a same-origin policy.

Public

Embed Notice

HTML Code

Corresponding Notice