Weekly github digest (WebAppSec specs)

Issues
------
* w3c/webappsec-csp (+0/-0/💬8)
  4 issues received 8 new comments:
  - #433 Are nonces allowed/supported in frame-src? (3 by arturjanc, dveditz, viraptor)
    https://github.com/w3c/webappsec-csp/issues/433 
  - #279 Sandbox directive for workers (2 by annevk, hiroshige-g)
    https://github.com/w3c/webappsec-csp/issues/279 
  - #215 Multiple CSP headers restriction is unclear (2 by ceckoslab, koto)
    https://github.com/w3c/webappsec-csp/issues/215 
  - #199 CSP3: Consider adding a 'clone-src' directive (1 by M3kH)
    https://github.com/w3c/webappsec-csp/issues/199 

* w3c/webappsec-credential-management (+2/-0/💬0)
  2 issues created:
  - Emails field (by dtruffaut)
    https://github.com/w3c/webappsec-credential-management/issues/146 
  - Update / Delete methods (by dtruffaut)
    https://github.com/w3c/webappsec-credential-management/issues/145 

* w3c/webappsec-referrer-policy (+1/-0/💬0)
  1 issues created:
  - Drop mentions of HTML5 (by annevk)
    https://github.com/w3c/webappsec-referrer-policy/issues/134 

* w3c/webappsec-feature-policy (+0/-0/💬19)
  2 issues received 19 new comments:
  - #374 Policies in data: urls (7 by annevk, clelland, jan-ivar, johannhof)
    https://github.com/w3c/webappsec-feature-policy/issues/374 
  - #189 Proposal: define default for all (12 by ewanm89, laukstein, oliverjanik, vphantom, xdevs23)
    https://github.com/w3c/webappsec-feature-policy/issues/189 [feature question] 

* WICG/trusted-types (+1/-0/💬5)
  1 issues created:
  - Make input to createHTML, createScript, and createScriptURL optional (by shhnjk)
    https://github.com/w3c/webappsec-trusted-types/issues/278 

  1 issues received 5 new comments:
  - #36 Expose information on status of TrustedTypes enforcement (5 by engelsdamien, koto, otherdaniel)
    https://github.com/w3c/webappsec-trusted-types/issues/36 [future] [spec] 



Pull requests
-------------
* w3c/webappsec-referrer-policy (+1/-1/💬0)
  1 pull requests submitted:
  - Add <script> for `referrerpolicy` content attribute (by Malvoz)
    https://github.com/w3c/webappsec-referrer-policy/pull/133 

  1 pull requests merged:
  - Add <script> for `referrerpolicy` content attribute
    https://github.com/w3c/webappsec-referrer-policy/pull/133 

* w3c/webappsec-feature-policy (+0/-0/💬1)
  1 pull requests received 1 new comments:
  - #366 Feature registry (1 by Malvoz)
    https://github.com/w3c/webappsec-feature-policy/pull/366 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/w3c/webappsec
* https://github.com/w3c/webappsec-subresource-integrity
* https://github.com/w3c/webappsec-csp
* https://github.com/w3c/webappsec-mixed-content
* https://github.com/w3c/webappsec-upgrade-insecure-requests
* https://github.com/w3c/webappsec-credential-management
* https://github.com/w3c/permissions
* https://github.com/w3c/webappsec-referrer-policy
* https://github.com/w3c/webappsec-secure-contexts
* https://github.com/w3c/webappsec-clear-site-data
* https://github.com/w3c/webappsec-cowl
* https://github.com/w3c/webappsec-epr
* https://github.com/w3c/webappsec-suborigins
* https://github.com/w3c/webappsec-cspee
* https://github.com/w3c/webappsec-feature-policy
* https://github.com/w3c/webappsec-fetch-metadata
* https://github.com/WICG/trusted-types
* https://github.com/w3c/webappsec-unofficial-drafts