CSP3: The 'worker-src' directive

The 'worker-src' directive restricts the URLs which may be loaded as a Worker, SharedWorker, or ServiceWorker. It falls back to 'child-src' (which, in turn, falls back to 'default-src').

Specification

Working draft or equivalent

Status in Chromium

Blink components: Blink>SecurityFeature

Enabled by default (launch bug) in:

• Chrome for desktop release 59
• Chrome for Android release 59
• Android WebView release 59
• Opera release 48
• Opera for Android release 48

Consensus & Standardization

• Firefox: Public support
• Edge: No public signals
• Safari: No public signals
• Web Developers: No signals

Owner

• mkwst@chromium.org

Last updated on 2017-06-16