Dylan Hardison [:dylan] (he/him) Reporter
	Description • 7 years ago

"Note: It is known that having both Content-Security-Policy and X-Content-Security-Policy or X-Webkit-CSP causes unexpected behaviours on certain versions of browsers. Please avoid using deprecated X-* headers."

https://content-security-policy.com/

We send all three. Should we fix this?

	April King [:April]
	Comment 1 • 7 years ago

There's no reason to use anything but just Content-Security-Policy at this point.

	Dylan Hardison [:dylan] (he/him) Reporter
	Comment 3 • 7 years ago

To git@github.com:mozilla-bteam/bmo.git
   a312a33e3..f25ef8dde  master -> master

	Dylan Hardison [:dylan] (he/him) Reporter
	Comment 4 • 7 years ago

This is now live.

	Ed Morley [:emorley]
	Comment 5 • 7 years ago

(In reply to April King [:April] from comment #1)
> There's no reason to use anything but just Content-Security-Policy at this
> point.

I've filed:
https://github.com/mozilla/http-observatory/issues/223