Re: [manifest] Define identity of a web app. (#272)

Also, protection against XSS attack is provided by `manifest-src`. So, evil.com won't be able to inject itself into good.com. 

---
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/issues/272#issuecomment-97839364

Received on Thursday, 30 April 2015 15:29:56 UTC