public-webappsec@w3.org from March 2013 by thread

CORS and wildcards. Mike West (Wednesday, 27 March)

[webappsec] Minutes from 26-Feb teleconference available Hill, Brad (Monday, 25 March)

[webappsec] Agenda for 25-March-2013 Teleconference Hill, Brad (Monday, 25 March)

[webappsec] new draft of UI Security available Hill, Brad (Monday, 25 March)

Fwd: minor typo in CORS spec section 6.2? Anne van Kesteren (Monday, 25 March)

"form-action" status. Mike West (Wednesday, 20 March)

"source-file" vs "source-url" Mike West (Wednesday, 20 March)

Include page http response code in CSP reports? Neil Matatall (Tuesday, 19 March)

CSP: set of report URIs Anne van Kesteren (Tuesday, 19 March)

SecurityPolicyViolation DOM events. Mike West (Tuesday, 19 March)

[webappsec] FW: security model of Web Components, etc. - joint work with WebAppSec? Hill, Brad (Monday, 18 March)

Nonces/hashes in source expressions. Mike West (Monday, 18 March)

Re: Heads up: proposal moving test repos to GitHub Mike West (Monday, 18 March)

CSP 1.0 copy&paste error Janusz Majnert (Thursday, 14 March)

please register for April face-to-face meeting Thomas Roessler (Wednesday, 13 March)

CSP - matching a URI against a source expression with no scheme Janusz Majnert (Wednesday, 13 March)

CSP: URLs Anne van Kesteren (Tuesday, 12 March)

CSP: error handling Anne van Kesteren (Tuesday, 12 March)

[webappsec] Joel Weinberger's thesis on Analysis and Enforcement of Web Application Security Policies Hill, Brad (Monday, 11 March)

security model of Web Components, etc. - joint work with WebAppSec? Hill, Brad (Friday, 8 March)

[webappsec] updated test VM available Hill, Brad (Friday, 8 March)

[webappsec] WG survey results Hill, Brad (Wednesday, 6 March)

Certificate Revocation in Java Ben Wilson (Wednesday, 6 March)

Re: ISSUE-38: Discuss no-mixed-content directive Adam Barth (Wednesday, 6 March)

Re: Blank blocked-uris Adam Barth (Wednesday, 6 March)

Re: [webappsec] Proposed text for jsonp directives Adam Barth (Wednesday, 6 March)

About script-nonce David Bruant (Tuesday, 5 March)

webappsec-ISSUE-45 ('top-only'): Is 'top-only' worth preserving? [UI Security] Web Application Security Working Group Issue Tracker (Tuesday, 5 March)

[webappsec] new draft of UI Security available Hill, Brad (Tuesday, 5 March)

Canonical paths Nick Krempel (Friday, 1 March)

CSP 1.0: Lax and strict CSS parsing rules Bjoern Hoehrmann (Friday, 1 March)

Re: Restricting <base> URLS via CSP Alex Russell (Friday, 1 March)

Re: CORS: Requirement for HTTP 200 response on preflight is not web-compatible and doesn't seem to be interoperably implemented Bjoern Hoehrmann (Friday, 1 March)

Last message date: Thursday, 28 March 2013 19:13:59 UTC