W3C home > Mailing lists > Public > public-webappsec@w3.org > October 2014

Re: [MIX] 4.5 User Controls

From: Anne van Kesteren <annevk@annevk.nl>
Date: Thu, 30 Oct 2014 15:11:09 +0100
Message-ID: <CADnb78jO0ar+39wBqf=DoPA4r+q_m2dPeREj3qvHWoiSiW7xtA@mail.gmail.com>
To: Mike West <mkwst@google.com>
Cc: WebAppSec WG <public-webappsec@w3.org>
On Thu, Oct 30, 2014 at 3:03 PM, Mike West <mkwst@google.com> wrote:
> What do you mean? What controls do folks want for CSP that we're not
> offering?

When I explained CSP to people they thought it was similar to Mixed
Content and could be overridden by the end user. It might be
worthwhile to point out in the specification that won't happen.

Received on Thursday, 30 October 2014 14:11:36 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:54:42 UTC