W3C home > Mailing lists > Public > public-webappsec@w3.org > February 2013

webappsec-ISSUE-42 (CSS Nonce): Script-nonce allows inline script, similar treatment for inline css?

From: Web Application Security Working Group Issue Tracker <sysbot+tracker@w3.org>
Date: Fri, 01 Feb 2013 04:57:44 +0000
Message-Id: <E1U18h6-00064b-PU@tibor.w3.org>
To: public-webappsec@w3.org
webappsec-ISSUE-42 (CSS Nonce): Script-nonce allows inline script, similar treatment for inline css?

http://www.w3.org/2011/webappsec/track/issues/42

Raised by: Brad Hill
On product: 

http://lists.w3.org/Archives/Public/public-webappsec/2012Dec/0047.html

Inline CSS is considered essential for web performance by many.  Should we add a css-nonce directive similar to script-nonce, or a more generic inline-nonce facility?
Received on Friday, 1 February 2013 04:57:45 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 1 February 2013 04:57:45 GMT