OLD | NEW |
1 <div id="pageData-name" class="pageData">Comply with CSP</div> | 1 <h1>Comply with CSP</h1> |
2 <div id="pageData-showTOC" class="pageData">true</div> | 2 |
3 | 3 |
4 <p> | 4 <p> |
5 If you're unfamiliar with Content Security Policy (CSP), | 5 If you're unfamiliar with Content Security Policy (CSP), |
6 <a href="http://www.html5rocks.com/en/tutorials/security/content-security-policy
/">An Introduction to Content Security Policy</a> | 6 <a href="http://www.html5rocks.com/en/tutorials/security/content-security-policy
/">An Introduction to Content Security Policy</a> |
7 is a good starting point. | 7 is a good starting point. |
8 It covers the broader web platform view of CSP; | 8 It covers the broader web platform view of CSP; |
9 packaged apps CSP isn't as flexible. | 9 packaged apps CSP isn't as flexible. |
10 You should read the | 10 You should read the |
11 <a href="http://code.google.com/chrome/extensions/contentSecurityPolicy.html">Ch
rome extension Content Security Policy</a> | 11 <a href="http://code.google.com/chrome/extensions/contentSecurityPolicy.html">Ch
rome extension Content Security Policy</a> |
12 as it's the foundation for the packaged app CSP. | 12 as it's the foundation for the packaged app CSP. |
(...skipping 103 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
116 </p> | 116 </p> |
117 | 117 |
118 <h3>Embed web content</h3> | 118 <h3>Embed web content</h3> |
119 | 119 |
120 <p> | 120 <p> |
121 Instead of using an iframe, | 121 Instead of using an iframe, |
122 you can call out to an external URL using an object tag | 122 you can call out to an external URL using an object tag |
123 (see <a href="app_external.html#objecttag">Embed external web pages</a>). | 123 (see <a href="app_external.html#objecttag">Embed external web pages</a>). |
124 </p> | 124 </p> |
125 | 125 |
126 <p class="backtotop"><a href="#top">Back to top</a></p> | 126 <p class="backtotop"><a href="#top">Back to top</a></p> |
127 | |
OLD | NEW |