Weekly github digest (WebAppSec specs)

Issues
------
* w3c/webappsec-subresource-integrity (+0/-0/💬4)
  2 issues received 4 new comments:
  - #68 integrity for downloads (3 by Marcono1234, mozfreddyb, tdelmas)
    https://github.com/w3c/webappsec-subresource-integrity/issues/68 [SRI-next] [feature-request] 
  - #11 SHA-3/Keccak (1 by isaacs)
    https://github.com/w3c/webappsec-subresource-integrity/issues/11 [feature-request] 

* w3c/webappsec-fetch-metadata (+1/-0/💬0)
  1 issues created:
  - Document still contains nested-document and nested-navigate (by annevk)
    https://github.com/w3c/webappsec-fetch-metadata/issues/55 

* WICG/trusted-types (+1/-1/💬3)
  1 issues created:
  - JavaScript event for tracking (and blocking) policy creation (by koto)
    https://github.com/w3c/webappsec-trusted-types/issues/270 

  2 issues received 3 new comments:
  - #270 JavaScript event for tracking (and blocking) policy creation (1 by koto)
    https://github.com/w3c/webappsec-trusted-types/issues/270 [spec] 
  - #258 Consider allowing creating a policy via a constructor. (2 by koto, othermaciej)
    https://github.com/w3c/webappsec-trusted-types/issues/258 [future] [spec] 

  1 issues closed:
  - Restrict to secure contexts https://github.com/w3c/webappsec-trusted-types/issues/259 [spec] 



Pull requests
-------------
* w3c/webappsec-mixed-content (+0/-1/💬1)
  1 pull requests received 1 new comments:
  - #24 Add FPWD document for MIX2 (1 by carlosjoan91)
    https://github.com/w3c/webappsec-mixed-content/pull/24 

  1 pull requests merged:
  - Add FPWD document for MIX2
    https://github.com/w3c/webappsec-mixed-content/pull/24 

* WICG/trusted-types (+7/-8/💬1)
  7 pull requests submitted:
  - 'require-trusted-types-for' works only in secure contexts. (by koto)
    https://github.com/w3c/webappsec-trusted-types/pull/274 
  - Bump acorn from 5.7.3 to 5.7.4 (by dependabot)
    https://github.com/w3c/webappsec-trusted-types/pull/273 
  - Adding TT to Worker constructors, Service Workers registration (by koto)
    https://github.com/w3c/webappsec-trusted-types/pull/272 
  - Added integration with WebIDL + relevant HTML callout. (by koto)
    https://github.com/w3c/webappsec-trusted-types/pull/271 
  - Deprecated TrustedURLs in the polyfill. (by koto)
    https://github.com/w3c/webappsec-trusted-types/pull/269 
  - Added support for trusted-types * to the polyfill. (by koto)
    https://github.com/w3c/webappsec-trusted-types/pull/268 
  - Added support for 'trusted-types *' to align better with other CSP directives. (by koto)
    https://github.com/w3c/webappsec-trusted-types/pull/267 

  1 pull requests received 1 new comments:
  - #273 Bump acorn from 5.7.3 to 5.7.4 (1 by wseltzer)
    https://github.com/w3c/webappsec-trusted-types/pull/273 [dependencies] 

  8 pull requests merged:
  - Bump acorn from 5.7.3 to 5.7.4
    https://github.com/w3c/webappsec-trusted-types/pull/273 [dependencies] 
  - 'require-trusted-types-for' works only in secure contexts.
    https://github.com/w3c/webappsec-trusted-types/pull/274 
  - Adding TT to Worker constructors, Service Workers registration
    https://github.com/w3c/webappsec-trusted-types/pull/272 
  - Added integration with WebIDL + relevant HTML callout.
    https://github.com/w3c/webappsec-trusted-types/pull/271 
  - Deprecated TrustedURLs in the polyfill.
    https://github.com/w3c/webappsec-trusted-types/pull/269 
  - Added support for trusted-types * to the polyfill.
    https://github.com/w3c/webappsec-trusted-types/pull/268 
  - Added support for 'trusted-types *' to align better with other CSP directives.
    https://github.com/w3c/webappsec-trusted-types/pull/267 
  - Added [SecureContext] to new interfaces.
    https://github.com/w3c/webappsec-trusted-types/pull/266 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/w3c/webappsec
* https://github.com/w3c/webappsec-subresource-integrity
* https://github.com/w3c/webappsec-csp
* https://github.com/w3c/webappsec-mixed-content
* https://github.com/w3c/webappsec-upgrade-insecure-requests
* https://github.com/w3c/webappsec-credential-management
* https://github.com/w3c/permissions
* https://github.com/w3c/webappsec-referrer-policy
* https://github.com/w3c/webappsec-secure-contexts
* https://github.com/w3c/webappsec-clear-site-data
* https://github.com/w3c/webappsec-cowl
* https://github.com/w3c/webappsec-epr
* https://github.com/w3c/webappsec-suborigins
* https://github.com/w3c/webappsec-cspee
* https://github.com/w3c/webappsec-feature-policy
* https://github.com/w3c/webappsec-fetch-metadata
* https://github.com/WICG/trusted-types
* https://github.com/w3c/webappsec-unofficial-drafts