- From: Ionuț Ambrosie <ambrosie@spotify.com>
- Date: Tue, 29 Jun 2021 14:20:10 +0200
- To: Edward.Chorbajian@stern.nyu.edu
- Cc: public-webappsec@w3.org
Received on Tuesday, 29 June 2021 12:26:26 UTC
Nice spot Edward! I've created a PR to address this here: https://github.com/w3c/webappsec-csp/pull/505. Since I am not affiliated with W3C, it looks like <https://labs.w3.org/repo-manager/pr/id/w3c/webappsec-csp/505> one of the WG’s team contacts should request me to sign the non-participant licensing commitments first. On Tue, Jun 29, 2021 at 9:59 AM Edward Chorbajian <ec1454@stern.nyu.edu> wrote: > Hello, > > > > In https://www.w3.org/TR/CSP3/#strict-dynamic-usage, EXAMPLE 23, the nonce > > > 'nonce-DhcnhD3khTMePgXwdayK9BsMqXjhguV' > > > does not match > > > nonce="DhcnhD3khTMePgXwdayK9BsMqXjhguVV" > > > because there is a missing 'V'. Please add a 'V' at the end of the first > nonce. > > > > Regards, > > Ed Chorbajian >
Received on Tuesday, 29 June 2021 12:26:26 UTC