CSP3: The 'worker-src' directive

The 'worker-src' directive restricts the URLs which may be loaded as a Worker, SharedWorker, or ServiceWorker. It falls back to 'child-src' (which, in turn, falls back to 'default-src').

Specification

Working draft or equivalent

Status in Chromium

Blink>SecurityFeature


Enabled by default (launch bug) in:

  • Chrome for desktop release 59
  • Chrome for Android release 59
  • Android WebView release 59
  • Opera release 48
  • Opera for Android release 48

Consensus & Standardization

  • Public support
  • No public signals
  • No public signals
  • No signals

Owner

Last updated on 2017-06-16