Is multiline metadata value allowed?

I use a tag meta http-equiv="Content-Security-Policy"for whitelisted domains. The list is getting quite large, so I was wondering if newlines can be used in a value content?

<meta http-equiv="Content-Security-Policy" content="
   default-src 'self' http://example.com;
   style-src 'self' 'unsafe-inline' http://example.com;
   script-src 'self' 'unsafe-inline' http://example.com;
">

EDIT: Just found that it validator.w3.orgshows an error in a multi-line contentvalue, so I assume this is not allowed.

+4
source share
1 answer

W3C HTML Checker (aka validator). HTML content. , :

Bad value Content-Security-Policy for attribute http-equiv on element meta

http-equiv, content.

:

<meta name="Content-Security-Policy" content="
   default-src 'self' http://example.com;
   style-src 'self' 'unsafe-inline' http://example.com;
   script-src 'self' 'unsafe-inline' http://example.com;
">

... , .

, , , , : meta http-equiv, HTML http-equiv :

  • content-type
  • default-style
  • refresh
  • X-UA-Compatible

, HTML () http-equiv="Content-Security-Policy".

, , ​​W3C HTML checker, checker http-equiv="Content-Security-Policy, http-equiv="Content-Security-Policy .

, .

HTML, HTML , http-equiv="Content-Security-Policy". Ive HTML , http-equiv="Content-Security-Policy" Pragma HTML, , , , .

+4

Source: https://habr.com/ru/post/1605604/


All Articles