public-webappsec@w3.org from June 2016 by thread

[REFERRER] Combining referrer policies Ryan Townsend (Monday, 27 June)

[webappsec] Tomorrow's teleconference CANCELLED Brad Hill (Wednesday, 29 June)

Accessing the same CORS-Resource from multiple sites Reto Gmür (Monday, 27 June)

Fwd: Subresource Integrity (SRI) is now a W3C Recommendation Daniel Veditz (Friday, 24 June)

CORS restrictions on preflight (too) strict? Ruben Verborgh (Wednesday, 22 June)

[suborigins] Understanding the syntax chloe (Tuesday, 21 June)

[suborigins] Understanding the syntax chloe (Monday, 20 June)

SameSite cookies and SAML Reed Loden (Friday, 17 June)

[webappsec] 6/15 call CANCELLED Brad Hill (Tuesday, 14 June)

SameSite=Strict cookies for a user entered URL Craig Francis (Monday, 13 June)

CSP script-src - Allow Js Events Harssh Mahajan (Friday, 10 June)

Whitelisting external resources by hash (was Re: Finalizing the shape of CSP ‘unsafe-dynamic’) Mike West (Tuesday, 7 June)

Should permission requests require a user gesture? Jeffrey Yasskin (Thursday, 2 June)

Finalizing the shape of CSP ‘unsafe-dynamic’ Artur Janc (Thursday, 2 June)

Re: VC meeting to discuss Permissions spec Jeffrey Yasskin (Wednesday, 1 June)

upgrade-insecure-request-with-fallback Tanvi Vyas (Wednesday, 1 June)

Re: [review] Performance API's, Security and Privacy Ilya Grigorik (Wednesday, 1 June)

Re: [webappsec] Tomorrow's teleconference CANCELLED. Mike West (Wednesday, 1 June)

Draft minutes from 16,17-May-2016 F2F @Mozilla, Mtn View Hodges, Jeff (Wednesday, 1 June)

Last message date: Thursday, 30 June 2016 23:16:49 UTC