Currently, default-src is required to be filled, but according to spec, it shouldn't be any longer.

Comments

p0deje’s picture

p0deje commented
Status: Active » Closed (fixed)

Done in 1.2

  • Commit 5fb1a65 on 7.x-1.x, 8.x-1.x by p0deje: 
    #1241888: default-src is not longer required