CSP, unsafe-eval and crypto.generateCRMFRequest
CSP and inline styles
Content-Security-Policy and dynamically added meta elements
- Re: Content-Security-Policy and dynamically added meta elements
- Re: Content-Security-Policy and dynamically added meta elements
RE: email threads wrt comments on Cross-Origin Resource Sharing (CORS)
Re: [webappsec] updated draft SVG: simple CORS request
RE: CSP violations introduced by Addons / Extensions
webappsec-ISSUE-41 (CSP and malicious extensions): CSP does not protect against malicious extensions
[webappsec] Draft agenda for tomorrow's teleconference
RE: email threads wrt comments on Cross-Origin Resource Sharing (CORS)
Line numbers in Content Security Policy reports
- Re: Line numbers in Content Security Policy reports