public-webappsec@w3.org from January 2014 by subject

"Subresource Integrity" spec up for review.

(nonce | hash)

[cors] Add 'Range' to simple headers

[CORS] Does the Authorization header qualify as a CORS credential?

[integrity] Downloads

[integrity]: CSS-loaded resources.

[integrity]: latency tradeoffs

[integrity]: Origin confusion attacks.

[webappsec] Agenda for Teleconference, 14 Jan 2014

[webappsec] Disambiguating some subresource integrity use-cases

[webappsec] Informal meetup at AppSec California?

[webappsec] New WG Teleconference Time

Agenda for 2014-01-28 Telecon. NOTE: new time, 1600 UTC

Are CSP directives case insensitive?

Beacon and CSP

CfC to publish new WD of CSP 1.1

Comments on Subresource Integrity

CSP 1.1 referrer + meta >= <meta name="referrer"> ?

CSP 1.1: What remains open (and important)?

CSP and Fetch

CSP formal objection.

CSP Transition Tools

errata link broken

Fwd: CSP formal objection.

GitHub? GitHub.

Hashes/Nonce Source and unsafe-inline

Holiday changes to the CSP 1.1 editor's draft.

How CSP is affected by HTML Imports (or vice versa)

Invitation to connect on LinkedIn

New poll: Europe-friendly teleconference time

Origin-scoped cache/cookie/storage context

Processing of meta element

referrer directive expressiveness

Security Review of Network Service Discovery

Sub-origins

Subresource Integrity and fingerprinting

Subresource Integrity Length Extension?

Subresource Integrity strawman.

W3C WebAppSec WG Meeting

webappsec-ISSUE-56 (child src navigation): Should we restrict subsequent navigation within child-src? [CSP 1.1]

Last message date: Thursday, 30 January 2014 23:23:12 UTC