The CSP anaylsis component ignores a "default none" setting when recommending settings #269
Description
Feedback received:
The CSP anaylsis component ignores a "default none" setting when recommending settings. For instance, it suggests setting "frame-anchestors" at the XFO header. That is - to my understanding - useless, when CSPs default is set to none.