public-webappsec@w3.org from August 2014 by thread

CSP for WebRTC Martin Thomson (Thursday, 28 August)

[CSP] Regarding style-src unsafe-eval and CSSOM Frederik Braun (Thursday, 28 August)

[CSP] Compatibility with 1.1 or 1.0 Jim Manico (Thursday, 28 August)

[webappsec] Concluding the Last Call period for CSP Level 2 Brad Hill (Wednesday, 27 August)

LAST CALL Kevin Hill (Wednesday, 27 August)

CSP Level 2 last call comment Hill, Brad (Wednesday, 27 August)

ISSUE-66: No-external-navigation as potential csp3 feature http://lists.w3.org/archives/public/public-webappsec/2014aug/0053.html Web Application Security Working Group Issue Tracker (Wednesday, 27 August)

ISSUE-65: Does "no referrer" specify a state or is it a token? is a token with a space problematic? Web Application Security Working Group Issue Tracker (Wednesday, 27 August)

ISSUE-64: Csp3 how to deal with large policies needed by single-page webapps (http://lists.w3.org/archives/public/public-webappsec/2014aug/0021.html) Web Application Security Working Group Issue Tracker (Wednesday, 27 August)

ISSUE-63: Disposition of ch-csp client hint Web Application Security Working Group Issue Tracker (Wednesday, 27 August)

[CSP] may we have script-ancestors to protect JSONP call Hatter Jiang OWS (Wednesday, 27 August)

[CSP] kill or delay child-src? Daniel Veditz (Wednesday, 27 August)

WebAppSec WG Teleconference 27-August-2014 08:00 PDT Brad Hill (Tuesday, 26 August)

OT: Technical Considerations for Vetting 3rd Party Mobile Applications Jeffrey Walton (Saturday, 23 August)

Secure origins, high value code and data, and CAs providing reputational service Jeffrey Walton (Friday, 22 August)

Defining secure-enough origins. Mike West (Friday, 22 August)

[CSP] feedback report-uri directive and report-only header Stefan Ossendorf (Thursday, 21 August)

Secure Origins and Strong Authentication Jeffrey Walton (Wednesday, 20 August)

re: Proposal: Prefer secure origins for powerful new web platform features Mark Watson (Wednesday, 20 August)

[REFERRER] Naming none and null policies Ángel (Monday, 18 August)

Re: CSP: 'no-external-navigation'? Deian Stefan (Tuesday, 19 August)

[CSP] Section 5.1 Workers, is this missing a case? Kevin Hill (Monday, 18 August)

[CSP] images loaded in object and embed Kevin Hill (Monday, 18 August)

Referrer: change from <meta> with respect to origin Anne van Kesteren (Monday, 18 August)

Sending a `context` HTTP request header. Mike West (Monday, 18 August)

[CSP] use csp-report-only to find out all content-type sniffing Hatter Jiang OWS (Saturday, 16 August)

Paths and Redirects Antonio Sanso (Friday, 15 August)

Referrer vs CSP Anne van Kesteren (Saturday, 16 August)

Referrer: typo Anne van Kesteren (Saturday, 16 August)

Comments on CSP Level 2 Nottingham, Mark (Thursday, 14 August)

Last call CSP Level 2 Kevin Hill (Wednesday, 13 August)

WASWG Teleconference Agenda 2014-08-13 0800 PDT Daniel Veditz (Wednesday, 13 August)

[CSP] Dynamic CSP Dmitry Polyakov (Monday, 11 August)

[CSP] feedback sandbox ABNF grammar conflict Stefan Ossendorf (Sunday, 10 August)

PSA: CSP2 last call ends Wednesday. Mike West (Monday, 11 August)

[CSP] prevent 401 attach Hatter Jiang (Friday, 8 August)

Call for Exclusions: Referrer Policy Coralie Mercier (Thursday, 7 August)

Entry Point Regulation (EPR) for web apps David Ross (Tuesday, 5 August)

Re: [MIX]: Can we distinguish between images loader via `<picture>`/`srcset` and `<img>`? Simon Pieters (Monday, 4 August)

Re: [REFERRER] Where does "Determine request’s Referrer" get its URL from? Anne van Kesteren (Friday, 1 August)

Re: [CSP] Request to amend bookmarklet/extensions sentence in CSP1.1 Daniel Veditz (Friday, 1 August)

Last message date: Sunday, 31 August 2014 17:02:36 UTC