public-webappsec@w3.org from July 2013 by author

Anne van Kesteren

Re: SEC Consult's "CSP Bypasses" (Wednesday, 17 July)
Re: SEC Consult's "CSP Bypasses" (Wednesday, 17 July)
Re: [webappsec + webapps] CORS to PR plans (Wednesday, 17 July)

Arthur Barstow

Re: [webappsec + webapps] CORS to PR plans (Thursday, 18 July)

Boris Zbarsky

Re: SEC Consult's "CSP Bypasses" (Wednesday, 17 July)

Brad Hill

[webappsec] Reminder: no call this week (Monday, 29 July)
Re: [webappsec] Proposed Agenda for 16-Jul-2013 Teleconference (Tuesday, 16 July)
[webappsec + webapps] CORS to PR plans (Tuesday, 16 July)
[webappsec] Proposed Agenda for 16-Jul-2013 Teleconference (Tuesday, 16 July)
Re: Content Security Policy: inline style blocking, CSSOM and unsafe-eval (Wednesday, 3 July)
Re: Proposal for script-hash directive in CSP 1.1 (Tuesday, 2 July)
[webappsec] Agenda for 2-July-2013 teleconference (Monday, 1 July)

Danesh Irani

Re: CSP 1.1: Nonce-source and unsafe-inline (Tuesday, 23 July)
CSP 1.1: Nonce-source and unsafe-inline (Wednesday, 17 July)

Daniel Veditz

Re: CSP 1.1: Nonce-source and unsafe-inline (Sunday, 21 July)

Devdatta Akhawe

Re: SEC Consult's "CSP Bypasses" (Wednesday, 24 July)

Garrett Robinson

Re: CSP 1.1: Nonce-source and unsafe-inline (Friday, 19 July)
Re: Supporting base64 in nonce-value (Monday, 1 July)

Henry Wong

Content Security Policy reports in Google+ (Monday, 22 July)

Joel Weinberger

Re: Supporting base64 in nonce-value (Wednesday, 3 July)

Mike West

Re: Content Security Policy reports in Google+ (Monday, 22 July)
Re: SEC Consult's "CSP Bypasses" (Thursday, 18 July)
Re: SEC Consult's "CSP Bypasses" (Thursday, 18 July)
Re: SEC Consult's "CSP Bypasses" (Wednesday, 17 July)
SEC Consult's "CSP Bypasses" (Tuesday, 16 July)

Neil Matatall

Re: CSP 1.1: Nonce-source and unsafe-inline (Tuesday, 23 July)
Re: CSP 1.1: Nonce-source and unsafe-inline (Sunday, 21 July)
Re: Proposal for script-hash directive in CSP 1.1 (Tuesday, 2 July)
Re: Proposal for script-hash directive in CSP 1.1 (Tuesday, 2 July)

Taras

Re: SEC Consult's "CSP Bypasses" (Wednesday, 17 July)

Web Application Security Working Group Issue Tracker

webappsec-ISSUE-54 (uri vs url): policy-uri vs. policy-url, (also report, etc.) [CSP 1.1] (Tuesday, 2 July)

Last message date: Monday, 29 July 2013 19:28:01 UTC