Merge pull request #457 from GalacticHypernova/patch-3

fix: remove navigate-to csp directive

Author: vejja

docs/content/1.documentation/2.headers/1.csp.md

@@ -75,7 +75,6 @@ contentSecurityPolicy: {
   'sandbox'?: CSPSandboxValue[] | false;
   'form-action'?: CSPSourceValue[] | false;
   'frame-ancestors'?: ("'self'" | "'none'" | string)[] | false;
-  'navigate-to'?: ("'self'" | "'none'" | "'unsafe-allow-redirects'" | string)[] | false;
   'report-uri'?: string[] | false;
   'report-to'?: string | false;
   'upgrade-insecure-requests'?: boolean;

src/types/headers.ts

@@ -82,7 +82,8 @@ export type ContentSecurityPolicyValue = {
   'sandbox'?: CSPSandboxValue[] | string | false;
   'form-action'?: CSPSourceValue[] | string | false;
   'frame-ancestors'?: ("'self'" | "'none'" | string)[] | string | false;
-  'navigate-to'?: ("'self'" | "'none'" | "'unsafe-allow-redirects'" | string)[] | string | false;
+  // See https://github.com/w3c/webappsec-csp/pull/564
+  //'navigate-to'?: ("'self'" | "'none'" | "'unsafe-allow-redirects'" | string)[] | string | false;
   'report-uri'?: string[] | string | false;
   'report-to'?: string | false;
   'upgrade-insecure-requests'?: boolean;