On Thu, Sep 8, 2016 at 2:08 PM, Christoph Kerschbaumer < ckerschbaumer@mozilla.com> wrote: > That's what I meant earlier. If we can provide better ways of stopping > unwanted script from executing, then the exfiltration is less of an issue. > I think the strict-dynamic approach can provide better security in that > sense. Still, the syntax issue needs to be discussed. As in our precious > email discussion, I think TPAC is probably a good venue, where all the > people interested are sitting on one table. > What syntax issue do we need to discuss? If there are remaining syntax questions, we should resolve them quickly, as Chrome is shipping what's currently in the spec, and Google sites are beginning to rely on the currently specified behavior. :) -mike
Received on Thursday, 8 September 2016 13:11:29 UTC