public-webappsec@w3.org from August 2013 by author

Alex Russell

• Re: Proposed CSRF countermeasure (Sunday, 18 August)

Anne van Kesteren

• Re: CSP 1.1 and image loading elements/attributes (Tuesday, 27 August)
• Re: [CORS] Understanding the definition of simple headers (Wednesday, 21 August)
• Re: [webappsec + webapps] CORS to PR plans (Tuesday, 6 August)

Arthur Barstow

• Re: [webappsec + webapps] CORS to PR plans (Tuesday, 6 August)

Boris Smus

• Re: Audio & security (Tuesday, 13 August)

Boris Zbarsky

• Re: Including the Javascript stack trace in the ContentSecurityPolicy report (Friday, 2 August)
• Re: Including the Javascript stack trace in the ContentSecurityPolicy report (Friday, 2 August)
• Re: Including the Javascript stack trace in the ContentSecurityPolicy report (Friday, 2 August)
• Re: Including the Javascript stack trace in the ContentSecurityPolicy report (Friday, 2 August)

Brad Hill

• Re: [webappsec] CSP: are blob uri's really just origin='self'? (Friday, 30 August)
• Re: [webappsec] CSP: are blob uri's really just origin='self'? (Friday, 30 August)
• [webappsec] CSP: are blob uri's really just origin='self'? (Friday, 30 August)
• CORS to PR (Thursday, 29 August)
• Re: Sub-origins (Thursday, 29 August)
• Re: Sub-origins (Thursday, 29 August)
• Re: Proposed CSRF countermeasure (Tuesday, 27 August)
• Re: Sub-origins (Monday, 26 August)
• Re: Sub-origins (Monday, 26 August)
• Re: Sub-origins (Monday, 26 August)
• Re: Proposed CSRF countermeasure (Monday, 26 August)
• Re: [CORS] Understanding the definition of simple headers (Wednesday, 21 August)
• Fwd: [webappsec + webapps] CORS to PR plans (Friday, 16 August)
• Re: [webappsec + webapps] CORS to PR plans (Friday, 16 August)
• [webappsec] Proposed Agenda for 13-Aug-2013 WebAppSec WG Teleconference (Monday, 12 August)
• Re: [webappsec + webapps] CORS to PR plans (Monday, 12 August)
• Re: [webappsec + webapps] CORS to PR plans (Monday, 12 August)
• Re: [webappsec + webapps] CORS to PR plans (Monday, 5 August)

Daniel Veditz

• Re: Sub-origins (Friday, 30 August)
• Sub-origins (Saturday, 3 August)
• Re: De-duplicating violation reports? (Saturday, 3 August)

David Bruant

• Re: Including the Javascript stack trace in the ContentSecurityPolicy report (Friday, 2 August)
• Re: Including the Javascript stack trace in the ContentSecurityPolicy report (Friday, 2 August)
• Re: Including the Javascript stack trace in the ContentSecurityPolicy report (Friday, 2 August)
• Re: Including the Javascript stack trace in the ContentSecurityPolicy report (Friday, 2 August)

Devdatta Akhawe

• Re: Sub-origins (Monday, 26 August)
• Re: Sub-origins (Monday, 26 August)
• Re: De-duplicating violation reports? (Thursday, 1 August)

Eric Rescorla

• Agenda for 8/27/13 Conference Call (Tuesday, 27 August)

Garrett Robinson

• Re: CSP 1.1: Nonce-source and unsafe-inline (Wednesday, 7 August)
• Re: Supporting base64 in nonce-value (Wednesday, 7 August)
• Re: CSP 1.1: Nonce-source and unsafe-inline (Wednesday, 7 August)

Henry Wong

• Re: Including the Javascript stack trace in the ContentSecurityPolicy report (Friday, 2 August)
• Including the Javascript stack trace in the ContentSecurityPolicy report (Friday, 2 August)

Hill, Brad

• RE: De-duplicating violation reports? (Thursday, 1 August)

Ian Melven

• Re: [webappsec] CSP: are blob uri's really just origin='self'? (Friday, 30 August)
• Re: [webappsec] CSP: are blob uri's really just origin='self'? (Friday, 30 August)
• Re: [webappsec] CSP: are blob uri's really just origin='self'? (Friday, 30 August)

Joel Weinberger

• Re: Sub-origins (Thursday, 29 August)
• Re: Sub-origins (Thursday, 29 August)
• Re: Supporting base64 in nonce-value (Wednesday, 7 August)

John Wilander

• Re: Proposed CSRF countermeasure (Tuesday, 20 August)

Kyle Huey

• Re: [webappsec] CSP: are blob uri's really just origin='self'? (Friday, 30 August)

Michael Shema

• Re: Proposed CSRF countermeasure (Tuesday, 27 August)
• Re: Proposed CSRF countermeasure (Tuesday, 27 August)
• Re: Proposed CSRF countermeasure (Tuesday, 20 August)
• Re: Proposed CSRF countermeasure (Monday, 19 August)
• Re: Proposed CSRF countermeasure (Monday, 19 August)

Michal Zalewski

• Re: Sub-origins (Thursday, 29 August)
• Re: Sub-origins (Thursday, 29 August)
• Re: Proposed CSRF countermeasure (Sunday, 18 August)

Mike Shema

• Proposed CSRF countermeasure (Thursday, 15 August)

Mike West

• Re: De-duplicating violation reports? (Monday, 5 August)
• Re: Supporting base64 in nonce-value (Monday, 5 August)
• Re: Sub-origins (Monday, 5 August)
• Re: De-duplicating violation reports? (Thursday, 1 August)
• De-duplicating violation reports? (Thursday, 1 August)

Monsur Hossain

• Re: [CORS] Understanding the definition of simple headers (Thursday, 22 August)
• [CORS] Understanding the definition of simple headers (Wednesday, 21 August)

Neil Matatall

• ACTION-147 RFC script-hash proposal v2 (Monday, 12 August)
• RE: De-duplicating violation reports? (Thursday, 1 August)

Pete Freitag

• Re: De-duplicating violation reports? (Thursday, 1 August)

Yoav Weiss

• CSP 1.1 and image loading elements/attributes (Monday, 26 August)
• Re: Audio & security (Friday, 16 August)
• Audio & security (Friday, 9 August)

Last message date: Friday, 30 August 2013 22:11:23 UTC