I think so, since onsubmit emits earlier than form is actually sent, so doesn't make sense to block.
-
-
-
I'm still undecided, but that's a good point :)
End of conversation
New conversation -
-
-
I voted no but on further thought I think yes. Onsubmit could have error handlers which should trigger if CSP blocks action.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
I'm mostly undecided, but the onsubmit event could change the form-action (not saying that's a good idea)
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
IMO yes, but obviously subject to default/script-src on unsafe-inline (if onsubmit is specified in attribute)
-
Don't really see any reason it should work any differently to <img src=# onerror='someScript()'>
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.