Adam Barth
- Re: Using CSP
- Re: Using CSP
- Re: Using CSP
- Re: Frame embedding: One problem, three possible specs?
- Re: [CSP] is frame-src a load-time restriction or permanent jail?
Anders Rundgren
Anne van Kesteren
- Re: [Bug 13373] New: Privacy: Limit SharedWorker connections to same top-level domain
- Re: CORS/UMP to become joint WebApps and WebAppSec joint deliverable
- Re: Publishing From-Origin Proposal as FPWD
- Re: Publishing From-Origin Proposal as FPWD
Ariel Silverstone
Arthur Barstow
- CORS/UMP to become joint WebApps and WebAppSec joint deliverable
- Re: Publishing From-Origin Proposal as FPWD
- CfC: publish FPWD of Cross-Origin Resource Embedding Exclusion; deadline July 12
- Re: Publishing From-Origin Proposal as FPWD
- Re: Publishing From-Origin Proposal as FPWD
Bjoern Hoehrmann
Boris Zbarsky
Brandon Sterne
Daniel Veditz
- Re: CSP and object URLs
- Re: Using CSP
- [CSP] is frame-src a load-time restriction or permanent jail?
- Re: CSP: meta-refresh directive?
- Re: Publishing From-Origin Proposal as FPWD
David Singer
Devdatta Akhawe
Hill, Brad
- RE: Using CSP
- RE: Using CSP
- RE: Frame embedding: One problem, three possible specs?
- RE: Comment
- RE: Publishing From-Origin Proposal as FPWD
- RE: Publishing From-Origin Proposal as FPWD
- RE: Publishing From-Origin Proposal as FPWD
- RE: Comment
Marcos Caceres
Mark Nottingham
Nick Gearls
Philippe Le Hegaret
Thomas Roessler
- Re: [Bug 13373] New: Privacy: Limit SharedWorker connections to same top-level domain
- Re: [Bug 13373] New: Privacy: Limit SharedWorker connections to same top-level domain
- Fwd: [websec] WG Last Call on draft-ietf-websec-origin-02 until Aug-15
- Re: CORS/UMP to become joint WebApps and WebAppSec joint deliverable
- Re: Frame embedding: One problem, three possible specs?
- Frame embedding: One problem, three possible specs?