Weekly github digest (WebAppSec specs)

Issues
------
* w3c/webappsec-csp (+2/-0/💬8)
  2 issues created:
  - Allow report-uri in meta tags. (by ScottHelme)
    https://github.com/w3c/webappsec-csp/issues/278
  - Allow CSP-Report-Only in meta tags. (by ScottHelme)
    https://github.com/w3c/webappsec-csp/issues/277

  2 issues received 8 new comments:
  - #217 CSP3: Consider adding a 'no-console-log' directive (7 by ScottHelme, april, gorhill, Zirro, devd)
    https://github.com/w3c/webappsec-csp/issues/217
  - #26 block-all-mixed-content for report-only (1 by ScottHelme)
    https://github.com/w3c/webappsec-csp/issues/26




Repositories tracked by this digest:
-----------------------------------
* https://github.com/w3c/webappsec
* https://github.com/w3c/webappsec-subresource-integrity
* https://github.com/w3c/webappsec-csp
* https://github.com/w3c/webappsec-mixed-content
* https://github.com/w3c/webappsec-upgrade-insecure-requests
* https://github.com/w3c/webappsec-credential-management
* https://github.com/w3c/permissions
* https://github.com/w3c/webappsec-referrer-policy
* https://github.com/w3c/webappsec-secure-contexts
* https://github.com/w3c/webappsec-clear-site-data
* https://github.com/w3c/webappsec-cowl
* https://github.com/w3c/webappsec-epr
* https://github.com/w3c/webappsec-suborigins