abarth/webkit — pull request #3 by mikewest (2012-05-17 14:48:21+00:00)
Title: Experimental `form-action` CSP directive

Hey Adam. This is a quick first pass at a `form-action` implementation. It's just enough to give us something to talk about, but certainly not ready to commit. Assuming that the current implementation is going in the right direction, I'm hoping you can point me a bit further on three points:

1. Redirects: I'm not at all sure what the flow is for redirected form submissions. Where do I need to look to ensure that I'm handling those correctly.

2. How do I go about generating a synthetic empty 400 error response? Right now I'm just returning early out of `FrameLoader::submitForm`... that's probably not enough.

3. How would I really test that the submission is blocked? I'm running a pretty long `setTimeout` right now, which is ugly, slow, and probably incorrect. I looked through some other tests, but none really helped me. I'm hoping you have ideas! :)

Thanks!