W3C home > Mailing lists > Public > public-web-security@w3.org > February 2011

Re: CSP Directive Proposal: Sandbox

From: Adam Barth <w3c@adambarth.com>
Date: Tue, 22 Feb 2011 19:41:09 -0800
Message-ID: <AANLkTi=GfqpJZuTYyWfehgu_MKmVuHbveTp+5L1wUY4L@mail.gmail.com>
To: Daniel Veditz <dveditz@mozilla.com>
Cc: "sird@rckc.at" <sird@rckc.at>, public-web-security@w3.org
Oh, I meant this group.

Adam


On Tue, Feb 22, 2011 at 6:24 PM, Daniel Veditz <dveditz@mozilla.com> wrote:
> I haven't seen any consensus forming on that, maybe Adam's "we"
> means webkit.
>
> On 2/22/11 1:31 AM, sird@rckc.at wrote:
>> Oh, I wasn't aware that the "default-do-noting" was really happening.
>>
>> -- Eduardo
>>
>> On Tue, Feb 22, 2011 at 1:16 AM, Adam Barth <w3c@adambarth.com> wrote:
>>> I don't think the situation is as tricky as you make it out to be,
>>> especially if we go the route of an empty CSP policy not implying
>>> inline script restrictions, which seems likely.
>>>
>>> Adam
>
>
>
Received on Wednesday, 23 February 2011 03:42:15 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Wednesday, 23 February 2011 03:42:17 GMT