Open
Description
https://fetch.spec.whatwg.org/#concept-request-destination shows the CSP directive for a specific destination. I think that list needs to be updated to Content Security Policy Level 3. For example the destination "script"
should now be "script-src-elem"
. (ref https://w3c.github.io/webappsec-csp/#effective-directive-for-a-request)