Weekly github digest (WebAppSec specs)

Issues
------
* w3c/webappsec (+0/-0/💬1)
  1 issues received 1 new comments:
  - #573 editorial issues with 2021 draft charter (1 by mikewest)
    https://github.com/w3c/webappsec/issues/573 

* w3c/webappsec-subresource-integrity (+0/-5/💬3)
  3 issues received 3 new comments:
  - #83 Relationship to Digest header (1 by annevk)
    https://github.com/w3c/webappsec-subresource-integrity/issues/83 
  - #72 Bikeshed generated a garbage at the top (1 by annevk)
    https://github.com/w3c/webappsec-subresource-integrity/issues/72 
  - #51 Consider require integrity metadata for Fetch (1 by annevk)
    https://github.com/w3c/webappsec-subresource-integrity/issues/51 [require-sri-for] 

  5 issues closed:
  - Remove the `integrity` IDL attributes https://github.com/w3c/webappsec-subresource-integrity/issues/92 
  - "Apply algorithm to response" is recursive with no base case https://github.com/w3c/webappsec-subresource-integrity/issues/63 
  - Bikeshed generated a garbage at the top https://github.com/w3c/webappsec-subresource-integrity/issues/72 
  - [CORS] reference is wrong https://github.com/w3c/webappsec-subresource-integrity/issues/41 [enhancement] 
  - Consider require integrity metadata for Fetch https://github.com/w3c/webappsec-subresource-integrity/issues/51 [require-sri-for] 

* w3c/webappsec-csp (+0/-3/💬8)
  5 issues received 8 new comments:
  - #455 Use Infra for JSON (3 by annevk, sideshowbarker)
    https://github.com/w3c/webappsec-csp/issues/455 
  - #446 Address Bikeshed warnings (1 by sideshowbarker)
    https://github.com/w3c/webappsec-csp/issues/446 
  - #418 hash-algo (2 by sideshowbarker)
    https://github.com/w3c/webappsec-csp/issues/418 
  - #296 Remove gh-pages branch? (1 by sideshowbarker)
    https://github.com/w3c/webappsec-csp/issues/296 
  - #262 Please clearly mark older versions as obsolete (1 by sideshowbarker)
    https://github.com/w3c/webappsec-csp/issues/262 

  3 issues closed:
  - Percent-decode is used incorrectly https://github.com/w3c/webappsec-csp/issues/448 
  - hash-algo https://github.com/w3c/webappsec-csp/issues/418 
  - Remove gh-pages branch? https://github.com/w3c/webappsec-csp/issues/296 

* w3c/webappsec-change-password-url (+0/-1/💬1)
  1 issues received 1 new comments:
  - #18 Migrate to WebAppSec? (1 by xfq)
    https://github.com/w3c/webappsec-change-password-url/issues/18 

  1 issues closed:
  - Migrate to WebAppSec? https://github.com/w3c/webappsec-change-password-url/issues/18 



Pull requests
-------------
* w3c/webappsec-subresource-integrity (+4/-5/💬3)
  4 pull requests submitted:
  - Remove text redundant with HTML (by annevk)
    https://github.com/w3c/webappsec-subresource-integrity/pull/99 
  - Editorial: correct heading level (by annevk)
    https://github.com/w3c/webappsec-subresource-integrity/pull/98 
  - Let Fetch be in charge of extracting the bytes (by annevk)
    https://github.com/w3c/webappsec-subresource-integrity/pull/97 
  - Reference Fetch spec rather than CORS spec (by sideshowbarker)
    https://github.com/w3c/webappsec-subresource-integrity/pull/96 

  2 pull requests received 3 new comments:
  - #97 Let Fetch be in charge of extracting the bytes (1 by annevk)
    https://github.com/w3c/webappsec-subresource-integrity/pull/97 
  - #96 Reference Fetch spec rather than CORS spec (2 by annevk, sideshowbarker)
    https://github.com/w3c/webappsec-subresource-integrity/pull/96 

  5 pull requests merged:
  - chore: Remove quotes in URL
    https://github.com/w3c/webappsec-subresource-integrity/pull/95 
  - Remove text redundant with HTML
    https://github.com/w3c/webappsec-subresource-integrity/pull/99 
  - Editorial: correct heading level
    https://github.com/w3c/webappsec-subresource-integrity/pull/98 
  - Let Fetch be in charge of extracting the bytes
    https://github.com/w3c/webappsec-subresource-integrity/pull/97 
  - Reference Fetch spec rather than CORS spec
    https://github.com/w3c/webappsec-subresource-integrity/pull/96 

* w3c/webappsec-csp (+8/-6/💬36)
  8 pull requests submitted:
  - Follow Bikeshed filename convention: Use index.bs (by sideshowbarker)
    https://github.com/w3c/webappsec-csp/pull/469 
  - Meta: Remove index.html from version control (by sideshowbarker)
    https://github.com/w3c/webappsec-csp/pull/468 
  - Change to "main" branch in Version History link (by sideshowbarker)
    https://github.com/w3c/webappsec-csp/pull/467 
  - Auto-deploy/publish to gh-pages w/ GitHub Actions (by sideshowbarker)
    https://github.com/w3c/webappsec-csp/pull/466 
  - Serialize JSON by reference to Infra spec (by sideshowbarker)
    https://github.com/w3c/webappsec-csp/pull/465 
  - Match hash-algorithm case-insensitively (as CSP2) (by sideshowbarker)
    https://github.com/w3c/webappsec-csp/pull/464 
  - Use “hash-algorithm” production name (not old CSP2 “hash-algo” production name) (by sideshowbarker)
    https://github.com/w3c/webappsec-csp/pull/463 
  - Fix calls to “percent-decode” algorithm (by sideshowbarker)
    https://github.com/w3c/webappsec-csp/pull/462 

  10 pull requests received 36 new comments:
  - #468 Meta: Remove index.html from version control (2 by annevk, sideshowbarker)
    https://github.com/w3c/webappsec-csp/pull/468 
  - #467 Change to "main" branch in Version History link (3 by annevk, sideshowbarker)
    https://github.com/w3c/webappsec-csp/pull/467 
  - #466 Auto-deploy/publish to gh-pages w/ GitHub Actions (2 by sideshowbarker)
    https://github.com/w3c/webappsec-csp/pull/466 
  - #465 Serialize JSON by reference to Infra spec (5 by annevk, mikewest, sideshowbarker)
    https://github.com/w3c/webappsec-csp/pull/465 
  - #464 Match hash-algorithm parts case-insensitively (as CSP2) (8 by ArthurSonzogni, annevk, antosart, mikewest, sideshowbarker)
    https://github.com/w3c/webappsec-csp/pull/464 [needs tests] 
  - #463 Use “hash-algorithm” name (not old CSP2 “hash-algo” name) (2 by mikewest, sideshowbarker)
    https://github.com/w3c/webappsec-csp/pull/463 
  - #462 Fix calls to “percent-decode” algorithm (3 by annevk, mikewest, sideshowbarker)
    https://github.com/w3c/webappsec-csp/pull/462 
  - #457 Introduce 'webrtc-src' as a simple on/off switch (6 by annevk, mikewest, sideshowbarker)
    https://github.com/w3c/webappsec-csp/pull/457 
  - #425 Clarify that integrity metadata must be non-empty (1 by w3cbot)
    https://github.com/w3c/webappsec-csp/pull/425 
  - #424 Use correct set of source expressions in script directives pre-request check (4 by annevk, sideshowbarker, w3cbot)
    https://github.com/w3c/webappsec-csp/pull/424 

  6 pull requests merged:
  - Remove plugin-types
    https://github.com/w3c/webappsec-csp/pull/456 
  - Meta: Remove index.html from version control
    https://github.com/w3c/webappsec-csp/pull/468 
  - Change to "main" branch in Version History link
    https://github.com/w3c/webappsec-csp/pull/467 
  - Auto-deploy/publish to gh-pages w/ GitHub Actions
    https://github.com/w3c/webappsec-csp/pull/466 
  - Fix calls to “percent-decode” algorithm
    https://github.com/w3c/webappsec-csp/pull/462 
  - Use “hash-algorithm” name (not old CSP2 “hash-algo” name)
    https://github.com/w3c/webappsec-csp/pull/463 

* w3c/webappsec-mixed-content (+2/-1/💬0)
  2 pull requests submitted:
  - Update index.html (by sideshowbarker)
    https://github.com/w3c/webappsec-mixed-content/pull/40 
  - Travis CI: Use "main" branch, not "master" (by sideshowbarker)
    https://github.com/w3c/webappsec-mixed-content/pull/39 

  1 pull requests merged:
  - Update index.html
    https://github.com/w3c/webappsec-mixed-content/pull/40 

* w3c/webappsec-credential-management (+9/-8/💬1)
  9 pull requests submitted:
  - Add .gitignore (to ignore index.html file) (by sideshowbarker)
    https://github.com/w3c/webappsec-credential-management/pull/163 
  - CI: Drop Travis, git rm index.html, use index.bs (by sideshowbarker)
    https://github.com/w3c/webappsec-credential-management/pull/162 
  - CI: Disable link checker (by sideshowbarker)
    https://github.com/w3c/webappsec-credential-management/pull/161 
  - Meta: Change to "main" branch in Version History link (by sideshowbarker)
    https://github.com/w3c/webappsec-credential-management/pull/160 
  - Cite HTML for postMessage(), not WEBMESSAGING (by sideshowbarker)
    https://github.com/w3c/webappsec-credential-management/pull/159 
  - Build, validate, and deploy spec automatically (by sideshowbarker)
    https://github.com/w3c/webappsec-credential-management/pull/158 
  - Jeffh update editorship (rebuild index.html) (by equalsJeffH)
    https://github.com/w3c/webappsec-credential-management/pull/157 
  - update editorship (by equalsJeffH)
    https://github.com/w3c/webappsec-credential-management/pull/156 [editorial] 
  - Add "conditional mediation" (by equalsJeffH)
    https://github.com/w3c/webappsec-credential-management/pull/155 [CREDENTIAL] [enhancement] 

  1 pull requests received 1 new comments:
  - #155 Add "conditional mediation" (1 by mikewest)
    https://github.com/w3c/webappsec-credential-management/pull/155 [CREDENTIAL] [enhancement] 

  8 pull requests merged:
  - Add .gitignore (to ignore index.html file)
    https://github.com/w3c/webappsec-credential-management/pull/163 
  - CI: Drop Travis, git rm index.html, use index.bs
    https://github.com/w3c/webappsec-credential-management/pull/162 
  - CI: Disable link checker
    https://github.com/w3c/webappsec-credential-management/pull/161 
  - Meta: Build, validate, and publish spec automatically
    https://github.com/w3c/webappsec-credential-management/pull/158 
  - Meta: Change to "main" branch in Version History link
    https://github.com/w3c/webappsec-credential-management/pull/160 
  - Cite HTML for postMessage(), not WEBMESSAGING fork
    https://github.com/w3c/webappsec-credential-management/pull/159 
  - Jeffh update editorship (rebuild index.html)
    https://github.com/w3c/webappsec-credential-management/pull/157 
  - update editorship
    https://github.com/w3c/webappsec-credential-management/pull/156 [editorial] 

* w3c/permissions (+0/-1/💬0)
  1 pull requests merged:
  - Expose PermissionName as IDL
    https://github.com/w3c/permissions/pull/229 

* w3c/webappsec-clear-site-data (+1/-1/💬0)
  1 pull requests submitted:
  - Update index.html (by sideshowbarker)
    https://github.com/w3c/webappsec-clear-site-data/pull/70 

  1 pull requests merged:
  - Update index.html
    https://github.com/w3c/webappsec-clear-site-data/pull/70 

* w3c/webappsec-permissions-policy (+1/-0/💬0)
  1 pull requests submitted:
  - Add .circleci/config.yml (by Brenoamandobg)
    https://github.com/w3c/webappsec-permissions-policy/pull/417 

* w3c/webappsec-trusted-types (+1/-0/💬1)
  1 pull requests submitted:
  - Fix remaining Web IDL issues (by foolip)
    https://github.com/w3c/webappsec-trusted-types/pull/308 

  1 pull requests received 1 new comments:
  - #282 Fix invalid Web IDL syntax (1 by foolip)
    https://github.com/w3c/webappsec-trusted-types/pull/282 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/w3c/webappsec
* https://github.com/w3c/webappsec-subresource-integrity
* https://github.com/w3c/webappsec-csp
* https://github.com/w3c/webappsec-mixed-content
* https://github.com/w3c/webappsec-upgrade-insecure-requests
* https://github.com/w3c/webappsec-credential-management
* https://github.com/w3c/permissions
* https://github.com/w3c/webappsec-referrer-policy
* https://github.com/w3c/webappsec-secure-contexts
* https://github.com/w3c/webappsec-clear-site-data
* https://github.com/w3c/webappsec-cowl
* https://github.com/w3c/webappsec-epr
* https://github.com/w3c/webappsec-suborigins
* https://github.com/w3c/webappsec-cspee
* https://github.com/w3c/webappsec-permissions-policy
* https://github.com/w3c/webappsec-fetch-metadata
* https://github.com/w3c/webappsec-trusted-types
* https://github.com/w3c/webappsec-change-password-url
* https://github.com/w3c/webappsec-unofficial-drafts


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Monday, 22 February 2021 17:00:24 UTC