CSP: worker-src
Baseline
Widely available
This feature is well established and works across many devices and browser versions. Itâs been available across browsers since 2022ë 5ì.
HTTP Content-Security-Policy (CSP) worker-src ì§ì문ì Worker, SharedWorker, ëë ServiceWorkerì ì í¨í ì¤í¬ë¦½í¸ ìì¤ë¥¼ ì§ì í©ëë¤.
| CSP ë²ì | 3 |
|---|---|
| ì§ì íì | Fetch directive |
| ëë¹ì± |
ì´ ì§ìë¬¸ì´ ìì¼ë©´ ì¬ì©ì ìì´ì í¸ë 먼ì |
구문
worker-src ì ì±
ì ëí´ íë ì´ìì ìì¤ë¥¼ íì©í ì ììµëë¤.
Content-Security-Policy: worker-src <source>;
Content-Security-Policy: worker-src <source> <source>;
ìì¤
<source>ë CSP Source Valuesì ëì´ë ê° ì¤ íëì
ëë¤.
ì´ ê°ì 모ë fetch ì§ì문 ë° ê¸°í ì¬ë¬ ì§ì문ìì ì¬ì©í ì ììµëë¤.
ìì
ìë° ì¬ë¡
주ì´ì§ CSP í´ëê° ë¤ìê³¼ ê°ë¤ë©´
Content-Security-Policy: worker-src https://example.com/
ìëìì Worker, SharedWorker, ServiceWorkerë ì°¨ë¨ëì´ ë¡ëëì§ ììµëë¤.
<script>
let blockedWorker = new Worker("data:application/javascript,â¦");
blockedWorker = new SharedWorker("https://not-example.com/");
navigator.serviceWorker.register("https://not-example.com/sw.js");
</script>
ëª ì¸ì
| Specification |
|---|
| Content Security Policy Level 3 # directive-worker-src |