Content Security Policy

Opera,

I've used your browsers on my phone and PC for quite some time and I really love the products you all have made. I encourage everyone I meet to use your products over others in terms of browsers due to the fact that I know the product is secure, safe, and will do generally about anything I ask it to. While I get teased that my browser has the ability to run a fish tank app, I tease back that their browsers aren't even HTTP 1.1 compatible. All this said, there is one issue that is run across by the Chrome/FF users and that is that Opera doesn't support Content Security Policy(CSP). Obviously there are reasons but the more you read about CSP the more it sounds like the leader in security on the web, Opera, should also harness this technology. Any plans to build CSP into Opera and how far out is it?

The test came back with fails which is why I expect that Opera currently doesn't have CSP support, I also was unable to find any articles that would have shown me that this support existed currently. Hence my post.

An article on the web about CSP:
http://www.ghacks.net/2011/05/08/firefox-4-supports-content-security-policy/

A testing site for CSP:
http://people.mozilla.org/~bsterne/content-security-policy/demo.cgi

System Specs:
Operating System: Windows 7 Professional
Opera Version: 11.51
Opera Build: 1087

By the way, Chrome does worst at the test by 1 test than Opera, so that's a good win there. Just FF, and I realize they wrote it, but doesn't mean it can't be made better.

Originally posted by Alveuel:

Any plans to build CSP into Opera and how far out is it?

Opera won't generally disclose anything about a feature.

Originally posted by Alveuel:

Just FF, and I realize they wrote it, but doesn't mean it can't be made better.

Yes, because Mozilla wrote it, it implemented CSP before other browsers. To gather some attention from Opera developers over this topic, please post feature requests in the Desktop wishlist forum. Please do not get disappointed if any Opera employee doesn't reply, sometimes they don't reply and sometimes they reply after months or sometimes even years.

Thanks for the reply Swapnil99pro. Some of the CSP stuff is in Opera already, since the testing site mentioned in my original comments does pass some of the tests while using Opera, just wondered if there was more to come, but I see your point. I'll add a post to the wishlist too.

Originally posted by Alveuel:

I'll add a post to the wishlist too.

Voted for your Desktop wishlist post.