public-webappsec@w3.org from April 2014 by author

Anne van Kesteren

Re: CORS and Caching (in reverse proxies / CDNs) (Wednesday, 30 April)
Re: CORS and Caching (in reverse proxies / CDNs) (Wednesday, 30 April)
CSP and mixed content (Wednesday, 30 April)
Re: CORS and Caching (in reverse proxies / CDNs) (Wednesday, 30 April)
Re: Worker / SharedWorker directive (Friday, 25 April)
CSP, Fetch, and frame-ancestors (Thursday, 24 April)
Worker / SharedWorker directive (Thursday, 24 April)
Re: CSP, Fetch, and Service Workers (Wednesday, 23 April)
Re: [CSP] SVG-in-img implementation difference (Wednesday, 23 April)
Re: [CSP] SVG-in-img implementation difference (Wednesday, 23 April)
Re: [CSP] SVG-in-img implementation difference (Wednesday, 23 April)
Re: [CSP] SVG-in-img implementation difference (Wednesday, 23 April)

Boris Zbarsky

Re: [integrity] What should we hash? (Wednesday, 9 April)
Re: [integrity] What should we hash? (Wednesday, 9 April)
Re: [integrity] What should we hash? (Wednesday, 9 April)
Re: [integrity] What should we hash? (Wednesday, 9 April)

Brad Hill

Re: [CSP] SVG-in-img implementation difference (Wednesday, 23 April)
[webappsec] AGENDA: WebAppSec WG Teleconference 23-April-2014 08:00 PDT (Tuesday, 22 April)
Re: [Integrity] Comments/Questions on Subresource Integrity spec (Wednesday, 9 April)
[webappsec] Agenda for Teleconference, 09-April-2014 08:00 PDT (Tuesday, 8 April)

Daniel Veditz

Re: CSP no-external-navigation (Wednesday, 23 April)

David Saez Padros

Re: CSP no-external-navigation (Wednesday, 23 April)
Re: CSP no-external-navigation (Wednesday, 23 April)
CSP no-external-navigation (Tuesday, 22 April)

Devdatta Akhawe

Re: [integrity] What should we hash? (Wednesday, 23 April)
Re: [Integrity] Comments/Questions on Subresource Integrity spec (Tuesday, 22 April)
Re: [integrity] What should we hash? (Thursday, 10 April)
Re: [integrity] What should we hash? (Wednesday, 9 April)
Re: [integrity] What should we hash? (Wednesday, 9 April)
Re: [integrity] What should we hash? (Wednesday, 9 April)

Hill, Brad

[webappsec] FW: Dan Veditz appointed co-chair of Web Application Security Working Group (Monday, 28 April)
Canceled: W3C WebAppSec WG Meeting (Wednesday, 23 April)
W3C WebAppSec WG Meeting (Wednesday, 23 April)
Re: CSP, Blob Workers, and Firefox (Sunday, 20 April)
RE: CORS and CSRF protection (Friday, 4 April)

Mark Nottingham

Re: [integrity] What should we hash? (Wednesday, 23 April)
Re: [integrity] What should we hash? (Thursday, 10 April)
Re: [integrity] What should we hash? (Wednesday, 9 April)

Mike West

Worker / SharedWorker directive (Friday, 25 April)
Re: [CSP] SVG-in-img implementation difference (Wednesday, 23 April)
Re: [CSP] SVG-in-img implementation difference (Wednesday, 23 April)
Re: [CSP] SVG-in-img implementation difference (Wednesday, 23 April)
Re: CSP, Blob Workers, and Firefox (Wednesday, 23 April)
Re: CSP no-external-navigation (Wednesday, 23 April)
Re: [Integrity] Comments/Questions on Subresource Integrity spec (Wednesday, 23 April)
Re: [CSP] SVG-in-img implementation difference (Wednesday, 23 April)

Monsur Hossain

Re: CORS and Caching (in reverse proxies / CDNs) (Wednesday, 30 April)
Re: CORS and CSRF protection (Monday, 7 April)
CORS and CSRF protection (Friday, 4 April)

Nils Goroll

Re: CORS and Caching (in reverse proxies / CDNs) (Wednesday, 30 April)
Re: CORS and Caching (in reverse proxies / CDNs) (Wednesday, 30 April)
Re: CORS and Caching (in reverse proxies / CDNs) (Wednesday, 30 April)
CORS and Caching (in reverse proxies / CDNs) (Monday, 28 April)

Paul Frazee

Re: CSP, Blob Workers, and Firefox (Wednesday, 23 April)
CSP, Blob Workers, and Firefox (Saturday, 19 April)

Sandeep Kamble

CSP Bypass Ideas (Monday, 7 April)

Tanvi Vyas

Re: [Integrity] Comments/Questions on Subresource Integrity spec (Wednesday, 23 April)
[Integrity] Comments/Questions on Subresource Integrity spec (Wednesday, 9 April)

Ted Mielczarek

Re: [CSP] SVG-in-img implementation difference (Wednesday, 23 April)
[CSP] SVG-in-img implementation difference (Thursday, 17 April)

Web Application Security Working Group Issue Tracker

webappsec-ISSUE-60 (CSP and META): Injecting META tags can be an interesting bypass technique, possibly [CSP 1.2] (Wednesday, 23 April)
webappsec-ISSUE-59 (SVG rules for CSP): Figure out how to use CSP appropriately with SVG modes [CSP 1.1] (Wednesday, 23 April)
webappsec-ISSUE-58 (Late binding of CSP): Late binding of CSP policies [CSP 1.1] (Tuesday, 8 April)

陈智昌

Re: [integrity] What should we hash? (Wednesday, 9 April)

Last message date: Wednesday, 30 April 2014 16:07:19 UTC