No, b/c those are well-aligned. CSP is not, that's why it's cumbersome.
-
-
edge just started thinking about CSP. FWs don't support it yet
-
because unsafe-dynamic seems like a better investment than CSP1&2
-
Yes, effort to add 's-d' is tiny once UA has nonces; benefits huge
- End of conversation
New conversation -
-
-
no they didn't. Only Chrome has unsafe-dynamic.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.