public-webappsec@w3.org from August 2014 by date

Sunday, 31 August 2014

• Re: Defining secure-enough origins. Anne van Kesteren

Thursday, 28 August 2014

• CSP for WebRTC Martin Thomson
• Re: [CSP] Regarding style-src unsafe-eval and CSSOM Jonas Sicking
• Re: Defining secure-enough origins. Jeffrey Yasskin
• [CSP] Regarding style-src unsafe-eval and CSSOM Frederik Braun
• Re: [CSP] Compatibility with 1.1 or 1.0 Frederik Braun
• Re: [CSP] may we have script-ancestors to protect JSONP call Hatter Jiang OWS
• Re: CSP Level 2 last call comment Devdatta Akhawe
• Re: [CSP] may we have script-ancestors to protect JSONP call Devdatta Akhawe
• [CSP] Compatibility with 1.1 or 1.0 Jim Manico

Wednesday, 27 August 2014

• [webappsec] Concluding the Last Call period for CSP Level 2 Brad Hill
• LAST CALL Kevin Hill
• CSP Level 2 last call comment Hill, Brad
• ISSUE-66: No-external-navigation as potential csp3 feature http://lists.w3.org/archives/public/public-webappsec/2014aug/0053.html Web Application Security Working Group Issue Tracker
• ISSUE-65: Does "no referrer" specify a state or is it a token? is a token with a space problematic? Web Application Security Working Group Issue Tracker
• ISSUE-64: Csp3 how to deal with large policies needed by single-page webapps (http://lists.w3.org/archives/public/public-webappsec/2014aug/0021.html) Web Application Security Working Group Issue Tracker
• ISSUE-63: Disposition of ch-csp client hint Web Application Security Working Group Issue Tracker
• [CSP] may we have script-ancestors to protect JSONP call Hatter Jiang OWS
• Regrets (Re: WebAppSec WG Teleconference 27-August-2014 08:00 PDT) Giorgio Maone
• Re: WebAppSec WG Teleconference 27-August-2014 08:00 PDT Wendy Seltzer
• [CSP] kill or delay child-src? Daniel Veditz

Tuesday, 26 August 2014

• WebAppSec WG Teleconference 27-August-2014 08:00 PDT Brad Hill

Monday, 25 August 2014

• Re: Defining secure-enough origins. Chris Palmer

Saturday, 23 August 2014

• Re: Proposal: Prefer secure origins for powerful new web platform features Anne van Kesteren
• Re: Secure origins, high value code and data, and CAs providing reputational service Michal Zalewski
• OT: Technical Considerations for Vetting 3rd Party Mobile Applications Jeffrey Walton

Friday, 22 August 2014

• Secure origins, high value code and data, and CAs providing reputational service Jeffrey Walton
• Re: Proposal: Prefer secure origins for powerful new web platform features Mark Watson
• Re: Proposal: Prefer secure origins for powerful new web platform features Jeffrey Yasskin
• Re: Proposal: Prefer secure origins for powerful new web platform features John Kemp
• Re: Proposal: Prefer secure origins for powerful new web platform features John Kemp
• Re: Proposal: Prefer secure origins for powerful new web platform features Chris Palmer
• Re: Proposal: Prefer secure origins for powerful new web platform features Jeffrey Yasskin
• Re: Proposal: Prefer secure origins for powerful new web platform features John Kemp
• Re: Proposal: Prefer secure origins for powerful new web platform features Jeffrey Yasskin
• Re: Defining secure-enough origins. Mike West
• Re: Proposal: Prefer secure origins for powerful new web platform features John Kemp
• Re: Proposal: Prefer secure origins for powerful new web platform features Chris Palmer
• Re: Proposal: Prefer secure origins for powerful new web platform features Chris Palmer
• Re: Proposal: Prefer secure origins for powerful new web platform features Chris Palmer
• Re: Defining secure-enough origins. Boris Zbarsky
• Re: Defining secure-enough origins. Mike West
• Re: Proposal: Prefer secure origins for powerful new web platform features Jim Manico
• Re: Defining secure-enough origins. Boris Zbarsky
• Re: Proposal: Prefer secure origins for powerful new web platform features Glenn Adams
• Re: Defining secure-enough origins. Mike West
• Re: Proposal: Prefer secure origins for powerful new web platform features Eduardo' Vela\
• Re: Proposal: Prefer secure origins for powerful new web platform features John Kemp
• Re: Defining secure-enough origins. Boris Zbarsky
• Re: Defining secure-enough origins. Mike West
• Re: Defining secure-enough origins. Boris Zbarsky
• Re: Defining secure-enough origins. Mike West
• Re: Defining secure-enough origins. Boris Zbarsky
• Re: Proposal: Prefer secure origins for powerful new web platform features Austin William Wright
• Re: [CSP] Section 5.1 Workers, is this missing a case? Mike West
• Re: Proposal: Prefer secure origins for powerful new web platform features John Kemp
• Defining secure-enough origins. Mike West
• Re: Proposal: Prefer secure origins for powerful new web platform features Ian Melven
• Re: Proposal: Prefer secure origins for powerful new web platform features Anne van Kesteren
• Re: Proposal: Prefer secure origins for powerful new web platform features Jeffrey Walton
• Re: Proposal: Prefer secure origins for powerful new web platform features Anne van Kesteren
• Re: Proposal: Prefer secure origins for powerful new web platform features Ian Melven
• Re: Proposal: Prefer secure origins for powerful new web platform features Jim Manico
• Re: Proposal: Prefer secure origins for powerful new web platform features Jim Manico
• Re: Proposal: Prefer secure origins for powerful new web platform features Jeffrey Yasskin
• Re: Proposal: Prefer secure origins for powerful new web platform features Mark Watson
• Re: Proposal: Prefer secure origins for powerful new web platform features Jeffrey Yasskin
• Re: Proposal: Prefer secure origins for powerful new web platform features Adam Langley
• Re: Proposal: Prefer secure origins for powerful new web platform features Mark Watson
• Re: Proposal: Prefer secure origins for powerful new web platform features Chris Palmer

Thursday, 21 August 2014

• Re: Proposal: Prefer secure origins for powerful new web platform features Mark Watson
• Re: Proposal: Prefer secure origins for powerful new web platform features Adam Langley
• Re: Proposal: Prefer secure origins for powerful new web platform features Mark Watson
• Re: Proposal: Prefer secure origins for powerful new web platform features Chris Palmer
• Re: Proposal: Prefer secure origins for powerful new web platform features Adam Langley
• Re: Proposal: Prefer secure origins for powerful new web platform features Eduardo' Vela\
• Re: Proposal: Prefer secure origins for powerful new web platform features Jeffrey Yasskin
• Re: Proposal: Prefer secure origins for powerful new web platform features Eduardo' Vela\
• Re: [CSP] feedback report-uri directive and report-only header Caleb Queern
• Re: Proposal: Prefer secure origins for powerful new web platform features Mark Watson
• Re: Proposal: Prefer secure origins for powerful new web platform features Chris Palmer
• Re: Proposal: Prefer secure origins for powerful new web platform features Chris Palmer
• Re: Proposal: Prefer secure origins for powerful new web platform features Eduardo' Vela\
• Re: Proposal: Prefer secure origins for powerful new web platform features Chris Palmer
• Re: Proposal: Prefer secure origins for powerful new web platform features Mark Watson
• Re: Proposal: Prefer secure origins for powerful new web platform features Chris Palmer
• Re: Secure Origins and Strong Authentication Chris Palmer
• RE: [CSP] Section 5.1 Workers, is this missing a case? Kevin Hill
• Re: Proposal: Prefer secure origins for powerful new web platform features Eduardo' Vela\
• RE: [CSP] feedback report-uri directive and report-only header Hill, Brad
• [CSP] feedback report-uri directive and report-only header Stefan Ossendorf
• Re: [REFERRER] Naming none and null policies Anne van Kesteren
• Re: Proposal: Prefer secure origins for powerful new web platform features Mike West
• Re: Proposal: Prefer secure origins for powerful new web platform features Mike West

Wednesday, 20 August 2014

• Re: Proposal: Prefer secure origins for powerful new web platform features Anne van Kesteren
• Re: Proposal: Prefer secure origins for powerful new web platform features Eduardo' Vela\
• Re: Proposal: Prefer secure origins for powerful new web platform features Mark Watson
• Re: Proposal: Prefer secure origins for powerful new web platform features Jim Manico
• Re: Proposal: Prefer secure origins for powerful new web platform features Mark Watson
• Secure Origins and Strong Authentication Jeffrey Walton
• Re: Proposal: Prefer secure origins for powerful new web platform features Jim Manico
• re: Proposal: Prefer secure origins for powerful new web platform features Mark Watson

Tuesday, 19 August 2014

• Re: [REFERRER] Naming none and null policies Mike West
• Re: [REFERRER] Naming none and null policies Anne van Kesteren
• Re: [REFERRER] Naming none and null policies Mike West
• Re: [REFERRER] Naming none and null policies Anne van Kesteren

Monday, 18 August 2014

• [REFERRER] Naming none and null policies Ángel

Tuesday, 19 August 2014

• Re: [CSP] Section 5.1 Workers, is this missing a case? Mike West
• Re: Comments on CSP Level 2 Nottingham, Mark
• Re: [CSP] images loaded in object and embed Anne van Kesteren
• Re: CSP: 'no-external-navigation'? Deian Stefan
• Re: [CSP] images loaded in object and embed Dirk Schulze
• Re: [CSP] images loaded in object and embed Mike West

Monday, 18 August 2014

• [CSP] Section 5.1 Workers, is this missing a case? Kevin Hill
• [CSP] images loaded in object and embed Kevin Hill
• Re: Paths and Redirects Antonio Sanso
• Re: Referrer: change from <meta> with respect to origin Mike West
• Re: Sending a `context` HTTP request header. Anne van Kesteren
• Re: Paths and Redirects Antonio Sanso
• Re: [CSP] use csp-report-only to find out all content-type sniffing Anne van Kesteren
• Referrer: change from <meta> with respect to origin Anne van Kesteren
• Re: Comments on CSP Level 2 Mike West
• Sending a `context` HTTP request header. Mike West
• Re: [CSP] use csp-report-only to find out all content-type sniffing Mike West
• Re: Paths and Redirects Mike West
• Re: Referrer: typo Mike West
• Re: Referrer vs CSP Mike West
• RE: [CSP] feedback sandbox ABNF grammar conflict Stefan Ossendorf
• Re: [CSP] feedback sandbox ABNF grammar conflict Mike West

Saturday, 16 August 2014

• [CSP] use csp-report-only to find out all content-type sniffing Hatter Jiang OWS

Friday, 15 August 2014

• Paths and Redirects Antonio Sanso

Saturday, 16 August 2014

• Referrer vs CSP Anne van Kesteren
• Referrer: typo Anne van Kesteren

Thursday, 14 August 2014

• Re: Comments on CSP Level 2 Nottingham, Mark
• Re: Comments on CSP Level 2 Anne van Kesteren
• Comments on CSP Level 2 Nottingham, Mark

Wednesday, 13 August 2014

• RE: Last call CSP Level 2 Kevin Hill
• Re: Last call CSP Level 2 Mike West
• Last call CSP Level 2 Kevin Hill
• Re: WASWG Teleconference Agenda 2014-08-13 0800 PDT Wendy Seltzer
• WASWG Teleconference Agenda 2014-08-13 0800 PDT Daniel Veditz

Tuesday, 12 August 2014

• AW: [CSP] feedback sandbox ABNF grammar conflict Stefan Ossendorf

Monday, 11 August 2014

• [CSP] Dynamic CSP Dmitry Polyakov
• Re: [CSP] feedback sandbox ABNF grammar conflict Mike West
• Re: [CSP] feedback sandbox ABNF grammar conflict Devdatta Akhawe

Sunday, 10 August 2014

• [CSP] feedback sandbox ABNF grammar conflict Stefan Ossendorf

Monday, 11 August 2014

• PSA: CSP2 last call ends Wednesday. Mike West

Saturday, 9 August 2014

• Re: [CSP] prevent 401 attach Anne van Kesteren

Friday, 8 August 2014

• [CSP] prevent 401 attach Hatter Jiang

Thursday, 7 August 2014

• Re: Entry Point Regulation (EPR) for web apps Giorgio Maone
• Call for Exclusions: Referrer Policy Coralie Mercier

Wednesday, 6 August 2014

• Re: Entry Point Regulation (EPR) for web apps David Ross
• Re: Entry Point Regulation (EPR) for web apps Frederik Braun
• Re: Entry Point Regulation (EPR) for web apps Anne van Kesteren

Tuesday, 5 August 2014

• Entry Point Regulation (EPR) for web apps David Ross

Monday, 4 August 2014

• Re: [MIX]: Can we distinguish between images loader via `<picture>`/`srcset` and `<img>`? Simon Pieters
• Re: [CSP] Request to amend bookmarklet/extensions sentence in CSP1.1 Brian Smith
• Re: [CSP] Request to amend bookmarklet/extensions sentence in CSP1.1 Brian Smith

Sunday, 3 August 2014

• Re: [CSP] Request to amend bookmarklet/extensions sentence in CSP1.1 Brad Hill
• Re: [CSP] Request to amend bookmarklet/extensions sentence in CSP1.1 Glenn Adams

Friday, 1 August 2014

• Re: [CSP] Request to amend bookmarklet/extensions sentence in CSP1.1 Philip Constantinou
• Re: [REFERRER] Where does "Determine request’s Referrer" get its URL from? Anne van Kesteren
• Re: [CSP] Request to amend bookmarklet/extensions sentence in CSP1.1 Giorgio Maone
• Re: [CSP] Request to amend bookmarklet/extensions sentence in CSP1.1 Daniel Veditz

Last message date: Sunday, 31 August 2014 17:02:36 UTC