http - Content security policy not working -


i adding response header header:

x-content-security-policy default-src 'none';

i expect no css or images loaded on page, loaded. doing wrong?

for chrome , newer (v. 23 , newer) versions of firefox:

content-security-policy: default-src 'none' 

for safari:

x-webkit-csp: default-src 'none' 

for older versions of firefox (v. 23 , older):

x-content-security-policy: default-src 'none' 

sorry - ie, sandbox policy recognized, , in ie 10 , newer.


Comments

Popular posts from this blog

blackberry 10 - how to add multiple markers on the google map just by url? -

php - guestbook returning database data to flash -

delphi - Dynamic file type icon -