From: Sebastin Santy <sebastinssanty@gmail.com>
Date: Thu, 9 Mar 2017 18:29:08 +0000 (+0530)
Subject: Bug 1345238 - CSP: Please avoid using deprecated X-* headers.
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f25ef8dde8327e8190c971b7fb443ba12816bdcf;p=thirdparty%2Fbugzilla.git

Bug 1345238 - CSP: Please avoid using deprecated X-* headers.
---

diff --git a/Bugzilla/CGI/ContentSecurityPolicy.pm b/Bugzilla/CGI/ContentSecurityPolicy.pm
index 022d49b44..88f2732bc 100644
--- a/Bugzilla/CGI/ContentSecurityPolicy.pm
+++ b/Bugzilla/CGI/ContentSecurityPolicy.pm
@@ -58,7 +58,7 @@ sub _has_directive {
 
 sub header_names {
     my ($self) = @_;
-    my @names = ('Content-Security-Policy', 'X-Content-Security-Policy', 'X-WebKit-CSP');
+    my @names = ('Content-Security-Policy');
     if ($self->report_only) {
         return map { $_ . '-Report-Only' } @names;
     }