public-webappsec@w3.org from September 2016 by subject

'strict-dynamic' syntax (was Re: On the Insecurity of Whitelists and the Future of CSP)

[blink-dev] Must have SSL or dedicated IP address?

[Css-images] Re: CSS fetch integration

[SRI] reporting (Was: [SRI] require-sri-for syntax and additional SRI/CSP interaction

[SRI] require-sri-for syntax and additional SRI/CSP interaction

[SRI] require-sri-for: missing integrity metadata? same-origin loads?

[suborigins] The origin relationship to suborigins

[webappsec] draft agenda for tomorrow's teleconference

[webappsec] WG Note: CORS for developers

`localhost` as Secure Context, take 2 (was Re: CfC: Transition "Secure Contexts" to CR; deadline August 2nd.)

Autoclave

Call availability during TPAC?

Call for Exclusions: Secure Contexts

Call on 9/21

CORS-safelisted request headers should be restricted according to RFC 7231

CSP tools and documentation

CSP: Embedded Enforcement

CSS fetch integration

Fwd: DRM protest timed with TPAC 2016

HSTS Priming

Isolate-Me explainer

On the Insecurity of Whitelists and the Future of CSP

Quoted Referrer-Policy values

remote participation for today's session

remote participation for TPAC

Restrict loopback address to Secure Contexts?

WebAppSec and Auto WG discussion during TPAC

webappsec tpac 2016 session agenda (?)

Workshop on Web Application Security 2016 Stanford University, Sep. 9, 2016

Last message date: Thursday, 29 September 2016 15:15:57 UTC