3 ms·
I'd rather they create a CSP directive like 'embed-ancestors' to restrict embedding. That seems like less overhead than a request header that's attached to all
by pfraze 12y ago
I'd rather they create a CSP directive like 'embed-ancestors' to restrict embedding. That seems like less overhead than a request header that's attached to all <img> requests.
- kretor 12y agoThe request header is already sent by all browsers. Developer tools in Chrome shows me that it sends accept: image/webp,*/*;q=0.8 when requesting images. I'm with you that a special CSP directive would be nice.