public-webappsec@w3.org from July 2014 by author

Adam Langley

Re: SRI and CORS (Thursday, 3 July)

Alex Sexton

[CSP] Rule referencing (Wednesday, 16 July)

Anne van Kesteren

Re: [REFERRER] Where does "Determine request’s Referrer" get its URL from? (Thursday, 31 July)
Re: [REFERRER] Where does "Determine request’s Referrer" get its URL from? (Wednesday, 30 July)
Re: [CSP] Directive to disallow a response from being used as a Service Worker (Tuesday, 29 July)
Re: [CSP] Directive to disallow a response from being used as a Service Worker (Tuesday, 29 July)
Re: [CSP] Directive to disallow a response from being used as a Service Worker (Tuesday, 29 July)
Re: [REFERRER] Where does "Determine request’s Referrer" get its URL from? (Tuesday, 29 July)
Re: [REFERRER] Where does "Determine request’s Referrer" get its URL from? (Monday, 28 July)
Re: img-src and inline <svg> (Monday, 28 July)
Re: SRI and CORS (Sunday, 27 July)
Re: img-src and inline <svg> (Sunday, 27 July)
Re: SRI and CORS (Thursday, 17 July)
Re: [MIX] Consider all CORS requests "active" (Friday, 11 July)
Re: [SRI] What should we Hash Redux (Thursday, 3 July)
Re: [SRI] What should we Hash Redux (Thursday, 3 July)
Re: SRI and CORS (Thursday, 3 July)
Re: SRI and CORS (Thursday, 3 July)
Re: SRI and CORS (Thursday, 3 July)
Re: SRI and CORS (Thursday, 3 July)
Re: SRI and CORS (Thursday, 3 July)
Re: [SRI] What should we Hash Redux (Thursday, 3 July)
SRI and CORS (Thursday, 3 July)
Re: [MIX] blob URLs (Thursday, 3 July)
Re: CSP 1.1 frameancestors and blobs (Thursday, 3 July)
Re: [MIX]: Can we distinguish between images loader via `<picture>`/`srcset` and `<img>`? (Wednesday, 2 July)
Re: Mixed Content Spec feedback (Wednesday, 2 July)
Re: CSP wildcard host matching (Tuesday, 1 July)
Re: Isolated Web Components for a more secure web (Tuesday, 1 July)

Brad Hill

Re: [webappsec] 30-July WebAppSec Teleconference CANCELLED (Wednesday, 30 July)
Re: SRI: <a> vs integrity (Tuesday, 29 July)
[webappsec] 30-July WebAppSec Teleconference CANCELLED (Tuesday, 29 July)
Re: [CSP] Directive to disallow a response from being used as a Service Worker (Tuesday, 29 July)
Re: [CSP] Directive to disallow a response from being used as a Service Worker (Tuesday, 29 July)
Re: SRI: <a> vs integrity (Tuesday, 29 July)
Re: img-src and inline <svg> (Monday, 28 July)
Re: SRI: <a> vs integrity (Monday, 28 July)
img-src and inline <svg> (Friday, 25 July)
Re: [Integrity] Signature based subresource integrity? (Tuesday, 22 July)
Re: CfC to publish FPWD on Referrer Policy. (Monday, 21 July)
Re: CORS and CSRF protection (Wednesday, 16 July)
Re: SRI and CORS (Wednesday, 16 July)
[webappsec] tomorrow's call (Tuesday, 15 July)
Re: PFWG comments on User Interface Security Directives for Content Security Policy (Wednesday, 2 July)
WebAppSec WG Teleconference 02-July-2014 08:00 PDT (Tuesday, 1 July)

Brian Smith

Re: [MIX] Consider all CORS requests "active" (Tuesday, 22 July)
Re: [MIX] Consider all CORS requests "active" (Tuesday, 22 July)
Re: [CSP] Directive to disallow a response from being used as a Service Worker (Monday, 21 July)
Re: [MIX] Consider all CORS requests "active" (Thursday, 10 July)

Caleb Queern

Re: CSP declarations in html meta tags (Tuesday, 15 July)
Re: CSP declarations in html meta tags (Sunday, 13 July)
CSP declarations in html meta tags (Friday, 11 July)

Chris Palmer

Re: SRI: <a> vs integrity (Tuesday, 29 July)
Re: [blink-dev] Proposal: Prefer secure origins for powerful new web platform features (Tuesday, 15 July)
Re: Proposal: Prefer secure origins for powerful new web platform features (Tuesday, 15 July)
Re: [Bulk] Proposal: Prefer secure origins for powerful new web platform features (Tuesday, 15 July)

Coralie Mercier

Call for Exclusions: Content Security Policy Level 2 (Monday, 7 July)

Daniel Kahn Gillmor

Re: Mixed Content Spec feedback (Wednesday, 2 July)

Daniel Roesler

Re: [Integrity] Signature based subresource integrity? (Tuesday, 22 July)
[Integrity] Signature based subresource integrity? (Monday, 21 July)

Daniel Veditz

Re: SRI: <a> vs integrity (Tuesday, 29 July)
WebAppSec WG Teleconference 16-July-2014 08:00 PDT (Wednesday, 16 July)
Re: [CSP] Request to amend bookmarklet/extensions sentence in CSP1.1 (Wednesday, 16 July)

David Walp

RE: Mixed Content Spec feedback (Thursday, 3 July)
Mixed Content Spec feedback (Wednesday, 2 July)

Deian Stefan

Re: CSP: 'no-external-navigation'? (Monday, 7 July)

Devdatta Akhawe

Re: [CSP] Directive to disallow a response from being used as a Service Worker (Thursday, 24 July)
Re: [CSP] Directive to disallow a response from being used as a Service Worker (Thursday, 24 July)
Re: [SRI] What should we Hash Redux (Thursday, 3 July)
Re: [SRI] What should we Hash Redux (Thursday, 3 July)
[SRI] What should we Hash Redux (Wednesday, 2 July)

Eduardo Robles Elvira

Re: SRI: <a> vs integrity (Tuesday, 29 July)
Re: SRI: <a> vs integrity (Monday, 28 July)
Re: SRI: <a> vs integrity (Monday, 28 July)
Re: [Integrity] Signature based subresource integrity? (Tuesday, 22 July)
Resource integrity transparency (Tuesday, 15 July)
Re: Isolated Web Components for a more secure web (Tuesday, 1 July)

Eduardo' Vela\

Re: Isolated Web Components for a more secure web (Tuesday, 1 July)

Frederik Braun

Re: SRI and CORS (Monday, 21 July)
Re: SRI and CORS (Thursday, 3 July)
Re: CSP wildcard host matching (Tuesday, 1 July)

Glenn Adams

Re: img-src and inline <svg> (Sunday, 27 July)
Re: [CSP] Request to amend bookmarklet/extensions sentence in CSP1.1 (Tuesday, 15 July)
Re: [MIX] Consider all CORS requests "active" (Thursday, 10 July)
Mixed Content ED Comments (Thursday, 3 July)

Gregory Huczynski

[CSP] Request to amend bookmarklet/extensions sentence in CSP1.1 (Tuesday, 15 July)
[CSP] Policy direction for bookmarklets/extensions augmenting page-level CSP? (Friday, 11 July)

Hill, Brad

Re: SRI: <a> vs integrity (Monday, 28 July)

Ian Hickson

Re: [REFERRER] Where does "Determine request’s Referrer" get its URL from? (Thursday, 31 July)
Re: [REFERRER] Where does "Determine request’s Referrer" get its URL from? (Wednesday, 30 July)
Re: [REFERRER] Where does "Determine request’s Referrer" get its URL from? (Tuesday, 29 July)
Re: [REFERRER] Where does "Determine request’s Referrer" get its URL from? (Monday, 28 July)
Re: [REFERRER] Where does "Determine request’s Referrer" get its URL from? (Friday, 25 July)
Re: [REFERRER] Where does "Determine request’s Referrer" get its URL from? (Thursday, 24 July)
[REFERRER] Where does "Determine request’s Referrer" get its URL from? (Wednesday, 23 July)

Ilya Grigorik

Re: [CSP] Directive to disallow a response from being used as a Service Worker (Thursday, 24 July)

Jake Archibald

Re: [MIX] Consider all CORS requests "active" (Tuesday, 22 July)
Re: [MIX] Consider all CORS requests "active" (Tuesday, 22 July)
Re: [MIX] Consider all CORS requests "active" (Friday, 11 July)
Re: [MIX] Consider all CORS requests "active" (Friday, 11 July)
[MIX] Consider all CORS requests "active" (Thursday, 10 July)

Jeffrey Yasskin

Re: [CSP] Directive to disallow a response from being used as a Service Worker (Sunday, 27 July)
Re: [CSP] Directive to disallow a response from being used as a Service Worker (Sunday, 27 July)
Re: [CSP] Directive to disallow a response from being used as a Service Worker (Thursday, 24 July)
Re: [CSP] Directive to disallow a response from being used as a Service Worker (Tuesday, 22 July)
Re: [CSP] Directive to disallow a response from being used as a Service Worker (Tuesday, 22 July)
[CSP] Directive to disallow a response from being used as a Service Worker (Monday, 21 July)

Jochen Eisinger

Re: [webappsec] 30-July WebAppSec Teleconference CANCELLED (Wednesday, 30 July)
Re: [REFERRER] Where does "Determine request's Referrer" get its URL from? (Thursday, 24 July)
Re: CfC to publish FPWD on Referrer Policy. (Tuesday, 22 July)
CfC to publish FPWD on Referrer Policy. (Monday, 21 July)

John Yeuk Hon Wong

Re: [CSP] Rule referencing (Wednesday, 16 July)

Joshua Peek

Re: [CSP] Directive to disallow a response from being used as a Service Worker (Thursday, 24 July)

Julian Reschke

SRI: <a> vs integrity (Sunday, 27 July)
[Integrity] HTTP/1.1 reference (Tuesday, 22 July)

Michael Cooper

Re: PFWG comments on User Interface Security Directives for Content Security Policy (Wednesday, 2 July)

Michal Zalewski

Re: CORS and CSRF protection (Wednesday, 16 July)
Re: CSP: 'no-external-navigation'? (Monday, 7 July)

Mike West

Re: [webappsec] 30-July WebAppSec Teleconference CANCELLED (Wednesday, 30 July)
Re: img-src and inline <svg> (Saturday, 26 July)
Re: [REFERRER] Where does "Determine request’s Referrer" get its URL from? (Friday, 25 July)
Re: [CSP] Directive to disallow a response from being used as a Service Worker (Thursday, 24 July)
Re: [REFERRER] Where does "Determine request’s Referrer" get its URL from? (Thursday, 24 July)
Re: [MIX] Consider all CORS requests "active" (Tuesday, 22 July)
Re: [CSP] Directive to disallow a response from being used as a Service Worker (Tuesday, 22 July)
Re: [MIX] Consider all CORS requests "active" (Tuesday, 22 July)
Re: CSP declarations in html meta tags (Sunday, 13 July)
Re: CSP declarations in html meta tags (Friday, 11 July)
Re: [MIX] Consider all CORS requests "active" (Thursday, 10 July)
Re: CSP: 'no-external-navigation'? (Monday, 7 July)
Re: Mixed Content ED Comments (Friday, 4 July)
Re: SRI and CORS (Thursday, 3 July)
Re: SRI and CORS (Thursday, 3 July)
Re: SRI and CORS (Thursday, 3 July)
Re: SRI and CORS (Thursday, 3 July)
Re: SRI and CORS (Thursday, 3 July)
Re: [MIX] blob URLs (Thursday, 3 July)
Re: CSP 1.1 frameancestors and blobs (Thursday, 3 July)
Re: CSP 1.1 frameancestors and blobs (Thursday, 3 July)
Re: Mixed Content Spec feedback (Wednesday, 2 July)
Re: CSP wildcard host matching (Tuesday, 1 July)

Monsur Hossain

Re: CORS and CSRF protection (Thursday, 17 July)
Re: CORS and CSRF protection (Wednesday, 16 July)

Neil Matatall

Re: [CSP] Rule referencing (Wednesday, 16 July)

Oda, Terri

"Why is CSP failing? Trends and Challenges in CSP Adoption" (Wednesday, 23 July)

pamela fox

Re: CSP: 'no-external-navigation'? (Monday, 7 July)
Re: CSP: 'no-external-navigation'? (Monday, 30 June)

Yoav Weiss

Re: [MIX]: Can we distinguish between images loader via `<picture>`/`srcset` and `<img>`? (Wednesday, 2 July)
Re: [MIX]: Can we distinguish between images loader via `<picture>`/`srcset` and `<img>`? (Tuesday, 1 July)

Last message date: Thursday, 31 July 2014 15:15:04 UTC