Weekly github digest (WebAppSec specs)

Issues
------
* w3c/webappsec (+0/-0/💬1)
  1 issues received 1 new comments:
  - #139 CSP3: Add something along the lines of `disown-window-owner`. (1 by andypaicu)
    https://github.com/w3c/webappsec/issues/139 [CSP] 

* w3c/webappsec-csp (+1/-3/💬10)
  1 issues created:
  - Remove mentions of the ws\wss schemes in CSP (by andypaicu)
    https://github.com/w3c/webappsec-csp/issues/332 

  6 issues received 10 new comments:
  - #326 Security issue: fragments (after the '#') must not be reported. (3 by alunmj, dveditz)
    https://github.com/w3c/webappsec-csp/issues/326 
  - #332 Remove mentions of the ws\wss schemes in CSP (3 by annevk, andypaicu, mikewest)
    https://github.com/w3c/webappsec-csp/issues/332 
  - #310 Directives fallback is not property setup for inline checks (1 by andypaicu)
    https://github.com/w3c/webappsec-csp/issues/310 [CSP] 
  - #87 Allow dynamically enabling/disabling unsafe-eval (1 by arturjanc)
    https://github.com/w3c/webappsec-csp/issues/87 
  - #316 I want all links on my website to be rel=noopener (1 by andypaicu)
    https://github.com/w3c/webappsec-csp/issues/316 
  - #286 Wrong url on example 6 (1 by andypaicu)
    https://github.com/w3c/webappsec-csp/issues/286 

  3 issues closed:
  - Wrong url on example 6 https://github.com/w3c/webappsec-csp/issues/286 
  - Remove worker references from child-src section https://github.com/w3c/webappsec-csp/issues/239 
  - Directives fallback is not property setup for inline checks https://github.com/w3c/webappsec-csp/issues/310 [CSP] 



Pull requests
-------------
* w3c/webappsec-csp (+7/-4/💬5)
  7 pull requests submitted:
  - Remove the ISSUE that states that CSP lists are missing from workers (by andypaicu)
    https://github.com/w3c/webappsec-csp/pull/334 
  - Cleanup of global object/document usage (by andypaicu)
    https://github.com/w3c/webappsec-csp/pull/333 
  - Added more restrictive conditions to ensure no dodgy schemes are allo… (by andypaicu)
    https://github.com/w3c/webappsec-csp/pull/331 
  - websocket example url (by andypaicu)
    https://github.com/w3c/webappsec-csp/pull/330 
  - Various bikeshed warnings and errors (by andypaicu)
    https://github.com/w3c/webappsec-csp/pull/329 
  - Added {script/style}-src-{attr/elem} to the iana registry section. (by andypaicu)
    https://github.com/w3c/webappsec-csp/pull/328 
  - Removed disown-opener as it will not make it into CSP3 (by andypaicu)
    https://github.com/w3c/webappsec-csp/pull/327 

  2 pull requests received 5 new comments:
  - #331 Added more restrictive conditions to ensure no dodgy schemes are allo… (4 by andypaicu, shekyan)
    https://github.com/w3c/webappsec-csp/pull/331 
  - #334 Remove the ISSUE that states that CSP lists are missing from workers (1 by andypaicu)
    https://github.com/w3c/webappsec-csp/pull/334 

  4 pull requests merged:
  - Added more restrictive conditions to ensure no dodgy schemes are allo…
    https://github.com/w3c/webappsec-csp/pull/331 
  - websocket example url
    https://github.com/w3c/webappsec-csp/pull/330 
  - Added {script/style}-src-{attr/elem} to the iana registry section.
    https://github.com/w3c/webappsec-csp/pull/328 
  - Removed disown-opener as it will not make it into CSP3
    https://github.com/w3c/webappsec-csp/pull/327 

* w3c/permissions (+1/-1/💬0)
  1 pull requests submitted:
  - Adding background fetch (by jakearchibald)
    https://github.com/w3c/permissions/pull/183 

  1 pull requests merged:
  - Adding background fetch
    https://github.com/w3c/permissions/pull/183 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/w3c/webappsec
* https://github.com/w3c/webappsec-subresource-integrity
* https://github.com/w3c/webappsec-csp
* https://github.com/w3c/webappsec-mixed-content
* https://github.com/w3c/webappsec-upgrade-insecure-requests
* https://github.com/w3c/webappsec-credential-management
* https://github.com/w3c/permissions
* https://github.com/w3c/webappsec-referrer-policy
* https://github.com/w3c/webappsec-secure-contexts
* https://github.com/w3c/webappsec-clear-site-data
* https://github.com/w3c/webappsec-cowl
* https://github.com/w3c/webappsec-epr
* https://github.com/w3c/webappsec-suborigins