Weekly github digest (WebAppSec specs)

Issues
------
* w3c/webappsec (+0/-0/💬4)
  1 issues received 4 new comments:
  - #555 TPAC 2019 Agenda. (4 by hillbrad, mikewest, johnwilander, terriko)
    https://github.com/w3c/webappsec/issues/555 

* w3c/webappsec-csp (+1/-0/💬1)
  1 issues created:
  - Update to constructor operations (by Ms2ger)
    https://github.com/w3c/webappsec-csp/issues/409 

  1 issues received 1 new comments:
  - #45 Further granularity of unsafe-inline styles (1 by simevidas)
    https://github.com/w3c/webappsec-csp/issues/45 [CORE] 

* w3c/webappsec-feature-policy (+1/-1/💬5)
  1 issues created:
  - allow="" attribute model (by annevk)
    https://github.com/w3c/webappsec-feature-policy/issues/337 

  3 issues received 5 new comments:
  - #337 allow="" attribute model (2 by annevk, clelland)
    https://github.com/w3c/webappsec-feature-policy/issues/337 
  - #193 Feature Policy: lazyload (2 by RGHuhn, Malvoz)
    https://github.com/w3c/webappsec-feature-policy/issues/193 [proposed feature] 
  - #230 Need to define how 'src' works with sandboxed frames (1 by annevk)
    https://github.com/w3c/webappsec-feature-policy/issues/230 [definition] 

  1 issues closed:
  - rename "webauthn" feature-identifier token to be "publickey-credentials" https://github.com/w3c/webappsec-feature-policy/issues/335 

* w3c/webappsec-fetch-metadata (+1/-0/💬7)
  1 issues created:
  - Interaction with Structured Headers (by annevk)
    https://github.com/w3c/webappsec-fetch-metadata/issues/40 

  1 issues received 7 new comments:
  - #40 Interaction with Structured Headers (7 by annevk, mikewest)
    https://github.com/w3c/webappsec-fetch-metadata/issues/40 

* WICG/trusted-types (+0/-0/💬6)
  1 issues received 6 new comments:
  - #209 Support a truly report-only and debuggable default policy (6 by koto, otherdaniel)
    https://github.com/WICG/trusted-types/issues/209 



Pull requests
-------------
* w3c/webappsec-mixed-content (+0/-1/💬0)
  1 pull requests merged:
  - Fill out Level 2 spec
    https://github.com/w3c/webappsec-mixed-content/pull/22 

* w3c/webappsec-feature-policy (+1/-1/💬2)
  1 pull requests submitted:
  - webauthn => publickey-credentials (by Malvoz)
    https://github.com/w3c/webappsec-feature-policy/pull/338 

  2 pull requests received 2 new comments:
  - #332 Create decoding-image-default-sync.md (1 by Malvoz)
    https://github.com/w3c/webappsec-feature-policy/pull/332 
  - #334 Add explicit [Exposed] (1 by clelland)
    https://github.com/w3c/webappsec-feature-policy/pull/334 

  1 pull requests merged:
  - rename 'webauthn' feature-identifier token  to 'publickey-credentials'
    https://github.com/w3c/webappsec-feature-policy/pull/336 

* WICG/trusted-types (+1/-0/💬0)
  1 pull requests submitted:
  - Build polyfill for multiple environments (by Siegrift)
    https://github.com/WICG/trusted-types/pull/210 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/w3c/webappsec
* https://github.com/w3c/webappsec-subresource-integrity
* https://github.com/w3c/webappsec-csp
* https://github.com/w3c/webappsec-mixed-content
* https://github.com/w3c/webappsec-upgrade-insecure-requests
* https://github.com/w3c/webappsec-credential-management
* https://github.com/w3c/permissions
* https://github.com/w3c/webappsec-referrer-policy
* https://github.com/w3c/webappsec-secure-contexts
* https://github.com/w3c/webappsec-clear-site-data
* https://github.com/w3c/webappsec-cowl
* https://github.com/w3c/webappsec-epr
* https://github.com/w3c/webappsec-suborigins
* https://github.com/w3c/webappsec-cspee
* https://github.com/w3c/webappsec-feature-policy
* https://github.com/w3c/webappsec-fetch-metadata
* https://github.com/WICG/trusted-types