Partial SOP Bypass via W3 Standards

Hi,

I have discovered a partial SOP bypass that works in every browser due to a
fundamental flaw in the W3 standards (for the time being, reach out to me
individually if you need to see the proof of concept). Is this the correct
place to open a discussion on how to fix or mitigate this flaw? Or is there
a limited subset of trusted W3 members I should include in the discussion?
Or should I send in bug reports to individual browser vendors?

Thanks,
David Dworken