Skip to content

Commit

Permalink
Remove outdated mention of JSONP (#37521)
Browse files Browse the repository at this point in the history
Mention outdated mention of JSONP
  • Loading branch information
chrisdavidmills authored Jan 6, 2025
1 parent 34e4f9a commit 565e999
Showing 1 changed file with 1 addition and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -55,9 +55,7 @@ If you are unable to get a strict CSP to work, an allowlist-based CSP is much be
>
> - `unsafe-inline`.
> - `data:` URIs inside `script-src`, `object-src`, or `default-src`.
> - overly broad sources or form submission targets.
>
> Similarly, the use of `script-src 'self'` can be unsafe for sites with JSONP endpoints. These sites should use a `script-src` that includes the path to their JavaScript source folder(s).
> - Overly broad sources or form submission targets.
If you are unable to use the `Content-Security-Policy` header, pages can instead include a [`<meta http-equiv="Content-Security-Policy" content="…">`](/en-US/docs/Web/HTML/Element/meta#http-equiv) element. This should be the first {{htmlelement("meta")}} element that appears inside the document {{htmlelement("head")}}.

Expand Down

0 comments on commit 565e999

Please sign in to comment.