From e89a1b4f03052a2d4c42dff9671cf3fd61bad616 Mon Sep 17 00:00:00 2001 From: gwarser Date: Thu, 9 Dec 2021 20:22:19 +0100 Subject: [PATCH] csp: make "applies to document only" more general --- Static-filter-syntax.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Static-filter-syntax.md b/Static-filter-syntax.md index 3392746..1c0f04b 100644 --- a/Static-filter-syntax.md +++ b/Static-filter-syntax.md @@ -508,7 +508,7 @@ Equivalent to `xmlhttprequest` [option](https://adblockplus.org/filters#options) #### `csp` -This option will inject additional [`Content-Security-Policy`](https://developer.mozilla.org/en-US/docs/Glossary/CSP) header to the HTTP network response of the requested web page. This [will make Content Security Policy more strict](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy#multiple_content_security_policies) as designed by specification. It can be applied to main document (`$document`) and documents in frames (`$subdocument`/`$frame`). +This option will inject additional [`Content-Security-Policy`](https://developer.mozilla.org/en-US/docs/Glossary/CSP) header to the HTTP network response of the requested web page. This [will make Content Security Policy more strict](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy#multiple_content_security_policies) as designed by specification. It will be applied to document requests only. This is special filter - it will not block matching resource, but only apply HTTP header to pages matching it. Because of this it cannot be mixed with other options speciyfing resource type, like for example `image`, `script` or [`frame`](#frame) (`subdocument`). It can still be used with [`1p`](#1p) (`first-party`), [`3p`](#3p) (`third-party`) or [`domain`](#domain) options.