public-webappsec@w3.org from February 2013 by author

=JeffH

RE: CSP script hashes (Tuesday, 12 February)

Adam Barth

Re: Restricting <base> URLS via CSP (Wednesday, 27 February)
Re: No scheme in policy: Errors for either scheme (Tuesday, 12 February)
Re: ISSUE-32: Do we specify that path-specificity applies only to hierarchical URI schemes? (Tuesday, 12 February)
Re: [webappsec] Handling custom elements in CSP (Saturday, 2 February)

Alex Russell

Re: Restricting <base> URLS via CSP (Thursday, 28 February)

Ben Wilson

FTC v HTC America (Sunday, 24 February)

Bjoern Hoehrmann

Re: CORS: Requirement for HTTP 200 response on preflight is not web-compatible and doesn't seem to be interoperably implemented (Thursday, 28 February)
Re: Action-92: Propose spec text to resolve ISSUE-32 (Tuesday, 26 February)
Re: Blank blocked-uris (Monday, 11 February)

Boris Zbarsky

Re: CORS: Requirement for HTTP 200 response on preflight is not web-compatible and doesn't seem to be interoperably implemented (Thursday, 28 February)
Re: CORS: Requirement for HTTP 200 response on preflight is not web-compatible and doesn't seem to be interoperably implemented (Thursday, 28 February)
CORS: Requirement for HTTP 200 response on preflight is not web-compatible and doesn't seem to be interoperably implemented (Thursday, 28 February)

Bryan McQuade

Re: CSP script hashes (Saturday, 16 February)
Re: CSP script hashes (Wednesday, 13 February)
Re: CSP script hashes (Tuesday, 12 February)
Re: CSP script hashes (Tuesday, 12 February)
Re: CSP script hashes (Tuesday, 12 February)
Re: CSP script hashes (Tuesday, 12 February)

bugzilla@jessica.w3.org

[Bug 21013] New: Credentials and HTTP authentication (Friday, 15 February)
[Bug 21012] New: Add more text on Vary (Friday, 15 February)

Daniel Veditz

Action-92: Propose spec text to resolve ISSUE-32 (Tuesday, 26 February)
Re: Do we need Connectors between javascript and security software at personal device? (Thursday, 14 February)
Re: No scheme in policy: Errors for either scheme (Tuesday, 12 February)
Re: ISSUE-38: Discuss no-mixed-content directive (Tuesday, 12 February)

David Ross

Feedback on UI Safety draft (Tuesday, 26 February)
RE: [webappsec] UI Security, allow-from values (Friday, 22 February)

Devdatta Akhawe

Re: Restricting <base> URLS via CSP (Thursday, 28 February)
Re: Restricting <base> URLS via CSP (Thursday, 28 February)

Eric Chen

Re: CSP script hashes (Tuesday, 12 February)
Re: CSP script hashes (Friday, 1 February)
Re: CSP script hashes (Friday, 1 February)
Re: CSP script hashes (Friday, 1 February)

Eric Rescorla

Agenda for Feb 26 Call (Tuesday, 26 February)

Giorgio Maone

Help needed (or not?) (was ISSUE-27: Implementation concern on how to enforce display-time : should we provide more advice on how to do this efficiently?) (Sunday, 10 February)

Hill, Brad

[webappsec] March 12 teleconference CANCELLED due to conflict with IETF (Tuesday, 26 February)
[webappsec] minutes available (Tuesday, 26 February)
RE: Feedback on UI Safety draft (Tuesday, 26 February)
RE: Agenda for Feb 26 Call (Tuesday, 26 February)
RE: Why no fragment part in CSP-report document-uri? (Friday, 15 February)
RE: CSP script hashes (Wednesday, 13 February)
[webappsec] WG satisfaction survey (Wednesday, 13 February)
[webappsec] UI Security, allow-from values (Tuesday, 12 February)
RE: CSP script hashes (Tuesday, 12 February)
[webappsec] Agenda for 12-Feb-2013 WebAppSec Teleconference (Tuesday, 12 February)
RE: CSP script hashes (Tuesday, 12 February)
RE: Blank blocked-uris (Monday, 11 February)
[webappsec] Handling custom elements in CSP (Friday, 1 February)

Ian Jacobs

Call for Exclusions (Update): User Interface Safety Directives for Content Security Policy (Tuesday, 19 February)

Ian Melven

Re: CSP script hashes (Tuesday, 12 February)
CSP and inline styles (Friday, 8 February)

Jacob Hoffman-Andrews

Re: CSP script hashes (Tuesday, 12 February)
Re: CSP script hashes (Tuesday, 12 February)
Re: CSP script hashes (Tuesday, 12 February)

John Wilander

Re: Why no fragment part in CSP-report document-uri? (Wednesday, 13 February)
Why no fragment part in CSP-report document-uri? (Wednesday, 13 February)

Mike West

Re: Blank blocked-uris (Monday, 11 February)
Re: Blank blocked-uris (Tuesday, 5 February)

Mountie Lee

Re: ISSUE-44: Same-origin policy identity query via script-hash. issue is you do a third party inline script with a known script-hash. if it succeeds, you know that the target was as expected, even though you can't read it (Wednesday, 27 February)
Do we need Connectors between javascript and security software at personal device? (Thursday, 14 February)
Re: CSP script hashes (Tuesday, 12 February)
Re: CSP script hashes (Tuesday, 12 February)

Neil Matatall

Re: No scheme in policy: Errors for either scheme (Tuesday, 12 February)
Re: No scheme in policy: Errors for either scheme (Tuesday, 12 February)
No scheme in policy: Errors for either scheme (Tuesday, 12 February)
Re: ISSUE-38: Discuss no-mixed-content directive (Tuesday, 12 February)
Re: Blank blocked-uris (Tuesday, 5 February)
RE: ISSUE-38: Discuss no-mixed-content directive (Tuesday, 5 February)
Blank blocked-uris (Tuesday, 5 February)

Nicholas Green

Proposal for script-hash directive in CSP 1.1 (Wednesday, 13 February)
W3C account (Wednesday, 13 February)
Re: CSP script hashes (Tuesday, 12 February)
Re: CSP script hashes (Friday, 1 February)
Re: CSP script hashes (Friday, 1 February)
CSP script hashes (Friday, 1 February)

Odin Hørthe Omdal

Re: CORS: Requirement for HTTP 200 response on preflight is not web-compatible and doesn't seem to be interoperably implemented (Thursday, 28 February)
Re: CORS: Requirement for HTTP 200 response on preflight is not web-compatible and doesn't seem to be interoperably implemented (Thursday, 28 February)
Re: CORS: Requirement for HTTP 200 response on preflight is not web-compatible and doesn't seem to be interoperably implemented (Thursday, 28 February)

Pellerin, Clement

[CORS] list max-age as algorithm parameter (Tuesday, 19 February)
[CORS] typos (Thursday, 14 February)

Web Application Security Working Group Issue Tracker

Yoav Weiss

Re: CSP script hashes (Tuesday, 12 February)
Re: CSP script hashes (Friday, 1 February)

Last message date: Thursday, 28 February 2013 21:19:02 UTC