Weekly github digest (WebAppSec specs)

Issues
------
* w3c/webappsec-subresource-integrity (+0/-0/💬1)
  1 issues received 1 new comments:
  - #22 Consider shared caching (1 by Cristy94)
    https://github.com/w3c/webappsec-subresource-integrity/issues/22 

* w3c/webappsec-csp (+0/-0/💬6)
  2 issues received 6 new comments:
  - #256 Add way to define all country code top-level domain. (5 by Drag13, koto)
    https://github.com/w3c/webappsec-csp/issues/256 
  - #116 Allow nonce-source to be used in more directives. (1 by eligrey)
    https://github.com/w3c/webappsec-csp/issues/116 

* w3c/permissions (+0/-0/💬1)
  1 issues received 1 new comments:
  - #150 Media autoplay permission (1 by xAvarice)
    https://github.com/w3c/permissions/issues/150 

* w3c/webappsec-cspee (+1/-0/💬1)
  1 issues created:
  - Should file and filesystem schemes allow blanket enforcement? (by antosart)
    https://github.com/w3c/webappsec-cspee/issues/10 

  1 issues received 1 new comments:
  - #10 Should file and filesystem schemes allow blanket enforcement? (1 by antosart)
    https://github.com/w3c/webappsec-cspee/issues/10 

* w3c/webappsec-feature-policy (+1/-2/💬5)
  1 issues created:
  - Remove '*' default allowlist (by annevk)
    https://github.com/w3c/webappsec-feature-policy/issues/381 

  2 issues received 5 new comments:
  - #381 Remove '*' default allowlist (2 by annevk, clelland)
    https://github.com/w3c/webappsec-feature-policy/issues/381 
  - #376 Feature Policy syntax: Structured Header? (3 by annevk, clelland)
    https://github.com/w3c/webappsec-feature-policy/issues/376 

  2 issues closed:
  - Renaming Feature Policy https://github.com/w3c/webappsec-feature-policy/issues/359 
  - Feature Policy shouldn't be overridable https://github.com/w3c/webappsec-feature-policy/issues/357 

* WICG/trusted-types (+0/-0/💬1)
  1 issues received 1 new comments:
  - #259 Restrict to secure contexts (1 by shhnjk)
    https://github.com/w3c/webappsec-trusted-types/issues/259 [spec] 



Pull requests
-------------
* w3c/webappsec-csp (+0/-0/💬5)
  1 pull requests received 5 new comments:
  - #435 Specify that match-ports matches an empty port with an empty port (5 by annevk, antosart)
    https://github.com/w3c/webappsec-csp/pull/435 

* w3c/webappsec-feature-policy (+3/-4/💬1)
  3 pull requests submitted:
  - Define "Permissions-Policy" as a structured header (by clelland)
    https://github.com/w3c/webappsec-feature-policy/pull/383 
  - Meta: acknowledge former name (by annevk)
    https://github.com/w3c/webappsec-feature-policy/pull/382 
  - Cleanup algorithms (by clelland)
    https://github.com/w3c/webappsec-feature-policy/pull/380 

  1 pull requests received 1 new comments:
  - #382 Meta: acknowledge former name (1 by clelland)
    https://github.com/w3c/webappsec-feature-policy/pull/382 

  4 pull requests merged:
  - Meta: acknowledge former name
    https://github.com/w3c/webappsec-feature-policy/pull/382 
  - Cleanup algorithms
    https://github.com/w3c/webappsec-feature-policy/pull/380 
  - Rename all the things
    https://github.com/w3c/webappsec-feature-policy/pull/379 
  - Change FP inheritance
    https://github.com/w3c/webappsec-feature-policy/pull/378 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/w3c/webappsec
* https://github.com/w3c/webappsec-subresource-integrity
* https://github.com/w3c/webappsec-csp
* https://github.com/w3c/webappsec-mixed-content
* https://github.com/w3c/webappsec-upgrade-insecure-requests
* https://github.com/w3c/webappsec-credential-management
* https://github.com/w3c/permissions
* https://github.com/w3c/webappsec-referrer-policy
* https://github.com/w3c/webappsec-secure-contexts
* https://github.com/w3c/webappsec-clear-site-data
* https://github.com/w3c/webappsec-cowl
* https://github.com/w3c/webappsec-epr
* https://github.com/w3c/webappsec-suborigins
* https://github.com/w3c/webappsec-cspee
* https://github.com/w3c/webappsec-feature-policy
* https://github.com/w3c/webappsec-fetch-metadata
* https://github.com/WICG/trusted-types
* https://github.com/w3c/webappsec-unofficial-drafts

Received on Monday, 1 June 2020 17:00:15 UTC