Regarding Action 67

• From: Tanvi Vyas <tanvi@mozilla.com>
• Date: Tue, 17 Jul 2012 14:35:45 -0700
• To: "public-webappsec@w3.org" <public-webappsec@w3.org>
• Message-ID: <5005DAB1.1050303@mozilla.com>

Today on the call we discussed Action 67: Add a description for how to 
handle content-type in CSP 1.1 - 06/30/2012, but could not remember what 
it pertained to.  We discussed it on 5/8/2012.  From my personal meeting 
notes, I had written down the following on the topic:

22:37 - 22:47    Content Type matching (CSP 1.1)
Content Type matching for script vs content type match for plugins.
On mailing list we talked about the script tags.

abarth: toggle in 1.1 - enforce content type for script or not. default not
dveditz: if its an option no one will set it.

Received on Tuesday, 17 July 2012 21:36:12 UTC