public-webappsec@w3.org from January 2013 by thread

Nonce for CSS, Signature of script, link, img? Hendrik Brummermann (Thursday, 31 January)

Small, non-normative changes to CSP 1.1 Mike West (Tuesday, 29 January)

Agenda for January 29 Teleconference Eric Rescorla (Tuesday, 29 January)

[webappsec] minutes published Hill, Brad (Monday, 28 January)

Raising to the list (Re: ISSUE-29: What are sane defaults for clipping with clipping or selectors?) Giorgio Maone (Saturday, 26 January)

Heads up: proposal moving test repos to GitHub Odin Hørthe Omdal (Tuesday, 22 January)

[webappsec] Agenda for 15-Jan-2013 Teleconference Hill, Brad (Tuesday, 15 January)

When triggering default-src, report type of violation Neil Matatall (Tuesday, 15 January)

CSP interacting with HSTS Ian Melven (Monday, 14 January)

[webappsec] Proposed text for jsonp directives Hill, Brad (Saturday, 12 January)

Browser Sandbox Security by internal attack Mountie Lee (Friday, 11 January)

CSP & iframe subresources Yoav Weiss (Friday, 11 January)

CSP & data URIs Yoav Weiss (Thursday, 10 January)

CSP and comma-separated directives Yoav Weiss (Tuesday, 8 January)

'none' in a source list. Mike West (Monday, 7 January)

Re: CSP, unsafe-eval and crypto.generateCRMFRequest Adam Barth (Saturday, 5 January)

Re: Line numbers in Content Security Policy reports Adam Barth (Saturday, 5 January)

Re: Comment on Content Security Policy 1.1, Draft of Dec 12 2012 Adam Barth (Saturday, 5 January)

Frame-options move to the W3C David Ross (Thursday, 3 January)

Re: CSP and inline styles Ian Melven (Tuesday, 1 January)

Last message date: Thursday, 31 January 2013 09:55:46 UTC