W3C home > Mailing lists > Public > public-webappsec@w3.org > March 2015

Re: HTML Imports and CSP

From: Mike West <mkwst@google.com>
Date: Fri, 27 Mar 2015 14:35:21 +0100
Message-ID: <CAKXHy=duVTR2hYpbD1rAVsF9y9FaXHTPj4HjrULbv1kaXdBg8A@mail.gmail.com>
To: Joel Weinberger <jww@chromium.org>
Cc: "public-webappsec@w3.org" <public-webappsec@w3.org>, Dimitri Glazkov <dglazkov@chromium.org>, Alex Russell <slightlyoff@chromium.org>, Justin Schuh <jschuh@chromium.org>
On Fri, Mar 27, 2015 at 2:12 PM, Mike West <mkwst@google.com> wrote:
> imports certainly don't seem to be going away (even though Mozilla doesn't
> like them :( ).

It's been pointed out to me (correctly!) that this was a terrible way of
phrasing my point, and comes off as confrontational and finger-pointy. I
didn't mean it that way, and I apologize for leaving that impression.

The point I was clumsily attempting to make was that folks are using
Imports now in Chrome, and the currently specified behavior makes them more
likely to abandon CSP than Imports. I'd like to fix that. :)

Mike West <mkwst@google.com>, @mikewest

Google Germany GmbH, Dienerstrasse 12, 80331 München,
Germany, Registergericht und -nummer: Hamburg, HRB 86891, Sitz der
Gesellschaft: Hamburg, Geschäftsführer: Graham Law, Christine Elizabeth
(Sorry; I'm legally required to add this exciting detail to emails. Bleh.)
Received on Friday, 27 March 2015 13:36:09 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:54:47 UTC