public-webappsec@w3.org from December 2011 by subject

<object>, text/html, and object-src/frame-src

• Adam Barth (Tuesday, 6 December)

[Bug 15312] New: lowercasing requirement for Access-Control-Request-Headers harmful

• bugzilla@jessica.w3.org (Thursday, 22 December)

[webappsec wg] Draft minutes from 12/20/2011 for approval on next call

• Hill, Brad (Friday, 30 December)

[webappsec WG] Security Considerations for CORS with credentials

• Hill, Brad (Thursday, 29 December)

Agenda for WebAppSec Call: Tuesday December 6

• Eric Rescorla (Monday, 5 December)

Call for Exclusions: Content Security Policy

• Ian Jacobs (Thursday, 1 December)

CfC: CORS to advance to Last Call

• Arthur Barstow (Tuesday, 20 December)
• Hill, Brad (Monday, 19 December)

CSP and HTML manipulation by Internet Access Providers

• Adam Barth (Friday, 30 December)
• Hendrik Brummermann (Thursday, 29 December)

CSP versus Content-Type on scripts and stylesheets

• Michal Zalewski (Tuesday, 20 December)

Draft meetings from Dec 06 call

• Hill, Brad (Tuesday, 20 December)

ISSUE-4: Policy combination

• Jacob Rossi (Sunday, 11 December)
• Adam Barth (Saturday, 10 December)
• Brandon Sterne (Saturday, 10 December)
• Hill, Brad (Friday, 9 December)
• Adam Barth (Friday, 9 December)
• Hill, Brad (Friday, 9 December)
• Adam Barth (Friday, 9 December)
• Brandon Sterne (Thursday, 8 December)
• Adam Barth (Thursday, 8 December)
• Giorgio Maone (Thursday, 8 December)
• Eric Rescorla (Thursday, 8 December)
• Giorgio Maone (Thursday, 8 December)
• Jacob Rossi (Thursday, 8 December)
• Adam Barth (Thursday, 8 December)

Meeting reminder

• Hill, Brad (Monday, 19 December)

Minutes from two weeks ago

• Eric Rescorla (Tuesday, 6 December)

no-external-navigation

• Adam Barth (Monday, 12 December)
• Michal Zalewski (Friday, 9 December)

Proposal: CSP "allow-modification" directive

• Adam Barth (Friday, 9 December)
• Thomas Roessler (Friday, 9 December)
• Adam Barth (Thursday, 8 December)
• Collin Jackson (Thursday, 8 December)

Sandbox directive

• Adam Barth (Monday, 5 December)

Testing CORS

• Arthur Barstow (Monday, 5 December)

W3C WebAppSec WG F2F meeting

• Hill, Brad (Tuesday, 20 December)

W3C WebAppSec WG Meeting

• Hill, Brad (Monday, 19 December)

W3C WebAppSec WG Meeting (regrets)

• Hodges, Jeff (Tuesday, 20 December)

WebAppSec WG call agenda, Dec 20, 2011, 22:00-23:00 UTC

• Hill, Brad (Monday, 19 December)

Last message date: Friday, 30 December 2011 08:15:54 UTC