W3C home > Mailing lists > Public > public-webappsec@w3.org > June 2014

Re: Header Policy Vs. Meta tag policy

From: Tanvi Vyas <tanvi@mozilla.com>
Date: Tue, 10 Jun 2014 12:25:15 -0700
Message-ID: <53975B9B.6090700@mozilla.com>
To: Mike West <mkwst@google.com>, Kevin Hill <khill@microsoft.com>
CC: "public-webappsec@w3.org" <public-webappsec@w3.org> 
On 6/9/14 9:50 PM, Mike West wrote:
>
> I'd prefer to maintain the ability to tighten a page's policy, as I 
> think there are totally valid use cases for such a thing, but so far 
> I've been the only one in favor of that, and the spec reflects my 
> understanding of the group's consensus.

I don't see any problem with using a meta policy to tighten (and not 
loosen) a header policy.  Perhaps we can revisit this discussion.
Received on Tuesday, 10 June 2014 19:25:44 UTC

This archive was generated by hypermail 2.3.1 : Monday, 23 October 2017 14:54:05 UTC