public-webappsec@w3.org from February 2014 by subject

'child-src' and popups.

[CSP] 'allow-meta': proposal for combining header and <meta> policies

[webappsec] Agenda for Teleconference, 12 Feb 2014

[webappsec] New call-for-consensus on UI Security

[webappsec] Please change your W3C passwords.

[webapsec] Agenda for Teleconference, 26 Feb 2014

Beacon and CSP

CORS for local resources

CSP formal objection.

CSP, Fetch, and Service Workers

ECMAScript and CSP

Holiday changes to the CSP 1.1 editor's draft.

Processing of meta element

referrer directive expressiveness

Removal of the note about extensions

Remove paths from CSP?

Reporting should be explicitly optional (was Re: CSP formal objection.)

W3C WebAppSec WG Meeting

webappsec-ISSUE-57: Do we want to control popups, if so, how? [CSP 1.2]

Last message date: Friday, 28 February 2014 19:31:56 UTC