{"action":"closed","issue":{"url":"https://api.github.com/repos/helmetjs/csp/issues/48","repository_url":"https://api.github.com/repos/helmetjs/csp","labels_url":"https://api.github.com/repos/helmetjs/csp/issues/48/labels{/name}","comments_url":"https://api.github.com/repos/helmetjs/csp/issues/48/comments","events_url":"https://api.github.com/repos/helmetjs/csp/issues/48/events","html_url":"https://github.com/helmetjs/csp/issues/48","id":177007717,"number":48,"title":"iOS chrome vs  Other Chrome (transformDirectivesForBrowser)","user":{"login":"chulander","id":4703475,"avatar_url":"https://avatars.githubusercontent.com/u/4703475?v=3","gravatar_id":"","url":"https://api.github.com/users/chulander","html_url":"https://github.com/chulander","followers_url":"https://api.github.com/users/chulander/followers","following_url":"https://api.github.com/users/chulander/following{/other_user}","gists_url":"https://api.github.com/users/chulander/gists{/gist_id}","starred_url":"https://api.github.com/users/chulander/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chulander/subscriptions","organizations_url":"https://api.github.com/users/chulander/orgs","repos_url":"https://api.github.com/users/chulander/repos","events_url":"https://api.github.com/users/chulander/events{/privacy}","received_events_url":"https://api.github.com/users/chulander/received_events","type":"User","site_admin":false},"labels":[{"id":333321659,"url":"https://api.github.com/repos/helmetjs/csp/labels/in%20progress","name":"in progress","color":"d4c5f9","default":false}],"state":"closed","locked":false,"assignee":{"login":"EvanHahn","id":777712,"avatar_url":"https://avatars.githubusercontent.com/u/777712?v=3","gravatar_id":"","url":"https://api.github.com/users/EvanHahn","html_url":"https://github.com/EvanHahn","followers_url":"https://api.github.com/users/EvanHahn/followers","following_url":"https://api.github.com/users/EvanHahn/following{/other_user}","gists_url":"https://api.github.com/users/EvanHahn/gists{/gist_id}","starred_url":"https://api.github.com/users/EvanHahn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/EvanHahn/subscriptions","organizations_url":"https://api.github.com/users/EvanHahn/orgs","repos_url":"https://api.github.com/users/EvanHahn/repos","events_url":"https://api.github.com/users/EvanHahn/events{/privacy}","received_events_url":"https://api.github.com/users/EvanHahn/received_events","type":"User","site_admin":false},"assignees":[{"login":"EvanHahn","id":777712,"avatar_url":"https://avatars.githubusercontent.com/u/777712?v=3","gravatar_id":"","url":"https://api.github.com/users/EvanHahn","html_url":"https://github.com/EvanHahn","followers_url":"https://api.github.com/users/EvanHahn/followers","following_url":"https://api.github.com/users/EvanHahn/following{/other_user}","gists_url":"https://api.github.com/users/EvanHahn/gists{/gist_id}","starred_url":"https://api.github.com/users/EvanHahn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/EvanHahn/subscriptions","organizations_url":"https://api.github.com/users/EvanHahn/orgs","repos_url":"https://api.github.com/users/EvanHahn/repos","events_url":"https://api.github.com/users/EvanHahn/events{/privacy}","received_events_url":"https://api.github.com/users/EvanHahn/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/helmetjs/csp/milestones/1","html_url":"https://github.com/helmetjs/csp/milestones/2.0.0","labels_url":"https://api.github.com/repos/helmetjs/csp/milestones/1/labels","id":1897345,"number":1,"title":"2.0.0","description":"`helmet-csp` will know much more about the CSP spec in version 2. It will throw errors in more cases and be stricter with input.","creator":{"login":"EvanHahn","id":777712,"avatar_url":"https://avatars.githubusercontent.com/u/777712?v=3","gravatar_id":"","url":"https://api.github.com/users/EvanHahn","html_url":"https://github.com/EvanHahn","followers_url":"https://api.github.com/users/EvanHahn/followers","following_url":"https://api.github.com/users/EvanHahn/following{/other_user}","gists_url":"https://api.github.com/users/EvanHahn/gists{/gist_id}","starred_url":"https://api.github.com/users/EvanHahn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/EvanHahn/subscriptions","organizations_url":"https://api.github.com/users/EvanHahn/orgs","repos_url":"https://api.github.com/users/EvanHahn/repos","events_url":"https://api.github.com/users/EvanHahn/events{/privacy}","received_events_url":"https://api.github.com/users/EvanHahn/received_events","type":"User","site_admin":false},"open_issues":0,"closed_issues":8,"state":"open","created_at":"2016-07-21T18:41:48Z","updated_at":"2016-10-28T20:35:12Z","due_on":null,"closed_at":null},"comments":3,"created_at":"2016-09-14T20:10:23Z","updated_at":"2016-10-28T20:35:11Z","closed_at":"2016-10-28T20:35:11Z","body":"I noticed that only in iOS Chrome, handler is truthy in the transformDirectivesForBrowser.js while mac, windows, and android returns false.\r\n\r\nthe truthy handler sets the connectSrc:[\"'self'\"] for iOS Chrome if the directive.connectSrc is falsy or appends \"'self'\" if the the directives.connectSrc doesn't contain \"'self'\".\r\n\r\nI was hoping that the defaultSrc would be the policy string, however in iOS Chrome, adding explicit connect-src to self is causing the web sockets domains to be ignored.\r\n\r\nI understand that I can just add each wss domain manually, however, would this be something to address or is this a non issue?\r\n\r\nThanks!\r\n\r\n"}}
{"actor":{"display_login":"EvanHahn"}}