From 2937e071d40e3f24cc8400d46a3adafd8731a824 Mon Sep 17 00:00:00 2001 From: =?utf8?q?S=C3=A9bastien=20Marie?= <semarie@users.noreply.github.com> Date: Tue, 28 Oct 2014 15:04:27 +0100 Subject: [PATCH] content-security-policy: update documentation mention RequestQueued as prefered autocmd event for content-security-policy. --- doc/vimb.1 | 14 +++++++++----- 1 file changed, 9 insertions(+), 5 deletions(-) diff --git a/doc/vimb.1 b/doc/vimb.1 index 1ae0c09..4735abc 100644 --- a/doc/vimb.1 +++ b/doc/vimb.1 @@ -630,8 +630,7 @@ Events: .TP .B LoadProvisional Fired if a new page is going to opened. No data has been received yet, the load -may still fail for transport issues. This is the right event to set `content-security-policy' -setting. +may still fail for transport issues. .TP .B LoadCommited Fired if first data chunk has arrived, meaning that the necessary transport @@ -649,6 +648,11 @@ Fires when everything that was required to display on the page has been loaded. Fired when some error occurred during the page load that prevented it from being completed. .TP +.B RequestQueued +Fired before each request (and so, multiple times in one page: one time for +each image, css, scripts, frames...). This is the right event to set +`content-security-policy' setting. +.TP .B DownloadStart Fired right before a download is started. This is fired for vimb downloads as well as external downloads if 'download-use-external' is enabled. @@ -1194,9 +1198,9 @@ Header completely from request. .RE .TP .B content-security-policy (string) -Prepend a `Content-Security-Policy' HTTP-Header to responses received from server. -This setting has to be setted early if managed with `autocmd' (at LoadProvisional), -in order to be managed by webkit. +Prepend a `Content-Security-Policy' HTTP-Header to responses received from +server. This setting has to be setted early if managed with `autocmd' (at +RequestQueued), in order to be managed by webkit. It could be used to implement a whitelist policy for visited uri. -- 2.20.1