@@ -17,24 +17,27 @@ feedback on the proposed solution. It has not been approved to ship in Chrome.
17
17
<!-- DON'T EDIT THIS SECTION, INSTEAD RE-RUN doctoc TO UPDATE -->
18
18
19
19
- [ Introduction] ( #introduction )
20
- - [ Goals] ( #goals )
21
- - [ Non-goals] ( #non-goals )
22
- - [ User research] ( #user-research )
23
- - [ Use cases] ( #use-cases )
24
- - [ Use case 1] ( #use-case-1 )
25
- - [ Use case 2] ( #use-case-2 )
26
- - [[ Potential Solution]] ( #potential-solution )
27
- - [ How this solution would solve the use cases] ( #how-this-solution-would-solve-the-use-cases )
28
- - [ Use case 1] ( #use-case-1-1 )
29
- - [ Use case 2] ( #use-case-2-1 )
30
- - [ Detailed design discussion] ( #detailed-design-discussion )
31
- - [[ Tricky design choice #1 ]] ( #tricky-design-choice-1 )
32
- - [[ Tricky design choice 2]] ( #tricky-design-choice-2 )
33
- - [ Considered alternatives] ( #considered-alternatives )
34
- - [[ Alternative 1]] ( #alternative-1 )
35
- - [[ Alternative 2]] ( #alternative-2 )
36
- - [ Stakeholder Feedback / Opposition] ( #stakeholder-feedback--opposition )
37
- - [ References & acknowledgements] ( #references--acknowledgements )
20
+ - [ ** Goals** ] ( #goals )
21
+ - [ <strong >Non-goals</strong >] ( #strongnon-goalsstrong )
22
+ - [ ** Use cases** ] ( #use-cases )
23
+ - [ Allowlisting specific URLs for use with script-src] ( #allowlisting-specific-urls-for-use-with-script-src )
24
+ - [ Allowlisting specific scripts for use with ` eval ` or ` Function ` ] ( #allowlisting-specific-scripts-for-use-with-eval-or-function )
25
+ - [ ** Proposed Solution** ] ( #proposed-solution )
26
+ - [ Add new CSP directive] ( #add-new-csp-directive )
27
+ - [ Introduce new url-hashes keyword to cover script-src attributes] ( #introduce-new-url-hashes-keyword-to-cover-script-src-attributes )
28
+ - [ Extend script hashes to cover eval] ( #extend-script-hashes-to-cover-eval )
29
+ - [ Add hashes to CSP reporting] ( #add-hashes-to-csp-reporting )
30
+ - [ ** Deployment use case examples** ] ( #deployment-use-case-examples )
31
+ - [ Single-page applications] ( #single-page-applications )
32
+ - [ Server-side applications] ( #server-side-applications )
33
+ - [ ** Open questions** ] ( #open-questions )
34
+ - [ Should the new script-src-v2 directive override script-src?] ( #should-the-new-script-src-v2-directive-override-script-src )
35
+ - [ ** Considered alternatives** ] ( #considered-alternatives )
36
+ - [ Allowlist external scripts directly by URL, instead of URL hash] ( #allowlist-external-scripts-directly-by-url-instead-of-url-hash )
37
+ - [ Overload the existing unsafe-hashes keyword] ( #overload-the-existing-unsafe-hashes-keyword )
38
+ - [ report-hash keyword] ( #report-hash-keyword )
39
+ - [ ** Stakeholder Feedback / Opposition** ] ( #stakeholder-feedback--opposition )
40
+ - [ ** References & acknowledgements** ] ( #references--acknowledgements )
38
41
39
42
<!-- END doctoc generated TOC please keep comment here to allow auto update -->
40
43
0 commit comments