Giters

webhintio / hint

💡 A hinting engine for the web

Home Page:https://webhint.io/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[Bug] allowedOrigins value "null" is not a valid origin

vidorteg opened this issue · comments

commented

🐞 Bug report

Description

When opening a local html with an iframe that has the default CSP webhint throws an error:
allowedOrigins value "null" is not a valid origin

image

Details

  • Create a file test.html with the following content:
<!DOCTYPE html>
<html lang='en'>
<body>
    <div>
        <div>
            <span>iframe: default-src CSP</span>
            <iframe marginwidth="0"
            title="iframe: default-src CSP"
            marginheight="0"
            hspace="0"
            vspace="0"
            frameborder="10"
            scrolling="no" src="http://bing.com"></iframe>
        </div>
    </div>
</body>
</html>
  • Open webhint and open test.html