public-webappsec@w3.org from October 2014 by thread

[CSP] Implementer differences: window.open Kevin Hill (Friday, 31 October)

Implementer differences Kevin Hill (Thursday, 30 October)

[MIX] 6.1 May browsing context use powerful features? Anne van Kesteren (Thursday, 30 October)

[MIX] 5.1 Does settings object restrict mixed content? Anne van Kesteren (Thursday, 30 October)

[MIX] 4.5 User Controls Anne van Kesteren (Thursday, 30 October)

[MIX] Normative statements in 4.1 Resource Fetching Anne van Kesteren (Thursday, 30 October)

[MIX] Modifications to script APIs Anne van Kesteren (Thursday, 30 October)

Permission that spans browsing contexts Anne van Kesteren (Thursday, 30 October)

CfC: Mixed Content to Last Call? Mike West (Wednesday, 29 October)

Minimum viable SRI? Mike West (Wednesday, 29 October)

FYI: Starting on CSP Next. Mike West (Wednesday, 29 October)

[webappsec] do we want a way to hash data: and blob: uris? Brad Hill (Tuesday, 28 October)

[SRI] To trust or not to trust a CDN Frederik Braun (Tuesday, 28 October)

[webappsec] TPAC agenda changes Brad Hill (Tuesday, 28 October)

[webappsec] F2F at TPAC on hold Brad Hill (Tuesday, 28 October)

No-context ACTION emails are confusing Anne van Kesteren (Tuesday, 28 October)

webappsec-ISSUE-69 (Overt channel control in CSP): Consider directives to manage postMessage and external navigation of iframes [CSP Next] Web Application Security Working Group Issue Tracker (Tuesday, 28 October)

[webappsec] survey results Brad Hill (Monday, 27 October)

webappsec-ACTION-199: Keep topic of internet/intranet connectivity and https on the w3c radar Web Application Security Working Group Issue Tracker (Monday, 27 October)

webappsec-ACTION-198: Take bookmarklets discussion back to the list Web Application Security Working Group Issue Tracker (Monday, 27 October)

webappsec-ACTION-197: Schedule an ad-hoc at TPAC 2014 (+wseltzer, +plh, +robin, +tbl?) Web Application Security Working Group Issue Tracker (Monday, 27 October)

webappsec-ACTION-196: Remove intranet/internet section from Mixed Content spec Web Application Security Working Group Issue Tracker (Monday, 27 October)

webappsec-ACTION-195: Respond to Hatter Jiang on JSONP directives - under consideration for v.Next Web Application Security Working Group Issue Tracker (Monday, 27 October)

webappsec-ACTION-194: Respond to Hatter Jiang on 401 attach Web Application Security Working Group Issue Tracker (Monday, 27 October)

webappsec-ISSUE-68 (401 prompting by subresources): How to manage 401 phishing prompts by subresources Web Application Security Working Group Issue Tracker (Monday, 27 October)

webappsec-ACTION-193: Respond to Brian Smith on referrer-policy Web Application Security Working Group Issue Tracker (Monday, 27 October)

webappsec-ACTION-192: Evaluate control over nesting depth. Web Application Security Working Group Issue Tracker (Monday, 27 October)

webappsec-ACTION-191: Inconsistency in source hash description Web Application Security Working Group Issue Tracker (Monday, 27 October)

webappsec-ACTION-190: Is reflected-xss directive at risk? Web Application Security Working Group Issue Tracker (Monday, 27 October)

[webappsec] TPAC living agenda Brad Hill (Sunday, 26 October)

[CSP] Inconsistency between Source hash introduction and Source hash usage Yagihashi Yu (Friday, 24 October)

[webappsec] updated (but still draft) TPAC agenda Brad Hill (Friday, 24 October)

Service workers, dedicated workers, and the environment settings object Anne van Kesteren (Friday, 24 October)

Frame Ancestors and Referrer (Re: [webappsec] Call for Consensus: Stop work on Content Security Policy 1.0, transition to WG Note) Mike West (Friday, 24 October)

[referrer] HTTPS->HTTP Mark Nottingham (Friday, 24 October)

[integrity] Different ways to associate integrity information Mark Nottingham (Friday, 24 October)

[webappsec] Rough and preliminary TPAC agenda for WebAppSec Brad Hill (Thursday, 23 October)

[MIX] Is origin an authenticated origin? Anne van Kesteren (Thursday, 23 October)

[MIX] feedback Mark Nottingham (Thursday, 23 October)

[webappsec] Call for Consensus: Stop work on Content Security Policy 1.0, transition to WG Note Brad Hill (Monday, 20 October)

[webappsec] Call for Consensus: CSP Level 2 to Candidate Recommendation Brad Hill (Monday, 20 October)

[webappsec] Survey on WebAppSec Charter v.Next work Brad Hill (Monday, 20 October)

"Secure Introduction of Internet-Connected Things" (was Re: [webappsec] Agenda for MONDAY Teleconference 2014-10-20, 12:00 PDT) Mike West (Monday, 20 October)

referrer policy questions Sid Stamm (Monday, 20 October)

[webappsec] Agenda for MONDAY Teleconference 2014-10-20, 12:00 PDT Brad Hill (Sunday, 19 October)

[webappsec] Topics for Rechartering Brad Hill (Sunday, 19 October)

NTP vs. HSTS John Kemp (Thursday, 16 October)

[Credential Management]: Tiny prototype to play around with. Mike West (Thursday, 16 October)

[webappsec] draft new WG home page Brad Hill (Monday, 13 October)

Allow dynamically inserted <script>-Tags from trustworthy Scripts Florian Weber (Thursday, 9 October)

webappsec-ACTION-189: Evaluatescript-ancestors Web Application Security Working Group Issue Tracker (Wednesday, 8 October)

webappsec-ACTION-188: Evaluate json-src Web Application Security Working Group Issue Tracker (Wednesday, 8 October)

Agenda for WebAppSec WG teleconference Wednesday Oct 8 Daniel Veditz (Wednesday, 8 October)

[webappsec] SRI : allow multiple integrity attributes or ni:// uris? Brad Hill (Monday, 6 October)

This week's teleconference - keep it Wednesday for one more week Brad Hill (Monday, 6 October)

[integrity] content-addressable cache? Frederik Braun (Monday, 6 October)

Last message date: Friday, 31 October 2014 18:38:19 UTC