webappsec-ISSUE-42 (CSS Nonce): Script-nonce allows inline script, similar treatment for inline css? from Web Application Security Working Group Issue Tracker on 2013-02-01 (public-webappsec@w3.org from February 2013)

From: Web Application Security Working Group Issue Tracker <sysbot+tracker@w3.org>
Date: Fri, 01 Feb 2013 04:57:44 +0000
To: public-webappsec@w3.org
Message-Id: <E1U18h6-00064b-PU@tibor.w3.org>

webappsec-ISSUE-42 (CSS Nonce): Script-nonce allows inline script, similar treatment for inline css?

http://www.w3.org/2011/webappsec/track/issues/42

Raised by: Brad Hill
On product: 

http://lists.w3.org/Archives/Public/public-webappsec/2012Dec/0047.html

Inline CSS is considered essential for web performance by many.  Should we add a css-nonce directive similar to script-nonce, or a more generic inline-nonce facility?

Received on Friday, 1 February 2013 04:57:45 UTC