public-webappsec@w3.org from January 2012 by author

Daniel Veditz

• Re: CSP and HTML manipulation by Internet Access Providers (Saturday, 14 January)

Eric Rescorla

• First policy policy (Action 34) (Tuesday, 17 January)
• Re: [webappsec-testsuite] Test VM - how to share it? (Thursday, 12 January)
• WebAppSec WG call agenda, Jan 3, 2012 22:00-23:00 UTC (Monday, 2 January)

Giorgio Maone

• Re: [webappsec] Including URI fragment in CSP reports (ACTION-43) (Tuesday, 31 January)

Hill, Brad

• RE: [webappsec] Including URI fragment in CSP reports (ACTION-43) (Tuesday, 31 January)
• [webappsec] Including URI fragment in CSP reports (ACTION-43) (Tuesday, 31 January)
• [webappsec] No call tomorrow, Jan 31. (Tuesday, 31 January)
• RE: [webappsec-testsuite] Test VM - how to share it? (Wednesday, 18 January)
• RE: [webappsec-testsuite] Test VM - how to share it? (Wednesday, 18 January)
• RE: [webappsec-testsuite] Test VM - how to share it? (Tuesday, 17 January)
• RE: [webappsec-testsuite] Test VM - how to share it? (Tuesday, 17 January)
• Agenda for WebAppSec WG call: Jan 17, 2012, 22:00 UTC (Tuesday, 17 January)
• RE: [webappsec-testsuite] Test VM - how to share it? (Friday, 13 January)
• [webappsec-testsuite] Test VM - how to share it? (Wednesday, 11 January)
• RE: [webappsec WG] Security Considerations for CORS with credentials (Monday, 9 January)
• RE: [webappsec] straw man anti-clickjacking proposal (Thursday, 5 January)
• [webappsec] straw man anti-clickjacking proposal (Tuesday, 3 January)

Michal Zalewski

• Re: [webappsec] straw man anti-clickjacking proposal (Thursday, 5 January)
• Re: [webappsec] straw man anti-clickjacking proposal (Tuesday, 3 January)

Odin Hørthe Omdal

• Re: RE: [webappsec-testsuite] Test VM - how to share it? (Friday, 13 January)
• Re: [webappsec-testsuite] Test VM - how to share it? (Thursday, 12 January)

Steingruebl, Andy

• RE: [webappsec] Including URI fragment in CSP reports (ACTION-43) (Tuesday, 31 January)

Thomas Roessler

• JSON patch format (Wednesday, 4 January)

Web Application Security Working Group Issue Tracker

• webappsec-ISSUE-12: Should 'self' be required to be replaced by explict host in reports? (Tuesday, 17 January)
• webappsec-ISSUE-11: Violation report privacy issues (Tuesday, 17 January)
• webappsec-ISSUE-10: Processing model for object element and frame-src directive (Tuesday, 17 January)
• webappsec-ISSUE-9: Should the user agent fire the error event when an img-src load fails? (Tuesday, 17 January)

Last message date: Tuesday, 31 January 2012 17:34:53 UTC