Bug 1345238 - CSP: Please avoid using deprecated X-* headers.

diff --git a/Bugzilla/CGI/ContentSecurityPolicy.pm b/Bugzilla/CGI/ContentSecurityPolicy.pm
index 022d49b44f60296db238110e6472680df036a22d..88f2732bc3f7f8fb1264250378925b27eb518921 100644 (file)
--- a/Bugzilla/CGI/ContentSecurityPolicy.pm
+++ b/Bugzilla/CGI/ContentSecurityPolicy.pm
@@ -58,7 +58,7 @@ sub _has_directive {
 
 sub header_names {
     my ($self) = @_;
-    my @names = ('Content-Security-Policy', 'X-Content-Security-Policy', 'X-WebKit-CSP');
+    my @names = ('Content-Security-Policy');
     if ($self->report_only) {
         return map { $_ . '-Report-Only' } @names;
     }