Weekly github digest (WebAppSec specs)

Issues
------
* w3c/webappsec-csp (+0/-0/💬3)
  2 issues received 3 new comments:
  - #460 CSP report referrer property in reports with frame-ancestors CSP directive violations  (1 by gravi2)
    https://github.com/w3c/webappsec-csp/issues/460 
  - #404 CSP HTTP headers not registered with IANA (2 by SmashManiac, mnot)
    https://github.com/w3c/webappsec-csp/issues/404 

* w3c/permissions (+1/-2/💬0)
  1 issues created:
  - Fix "dot" notation in algorithms (by miketaylr)
    https://github.com/w3c/permissions/issues/302 

  2 issues closed:
  - Ensure "push" permission is integrated into Push API spec https://github.com/w3c/permissions/issues/293 
  - Fix "dot" notation in algorithms https://github.com/w3c/permissions/issues/302 

* w3c/webappsec-change-password-url (+0/-0/💬1)
  1 issues received 1 new comments:
  - #15 Clarify that redirects should be followed to resolve the Change Password URL (1 by dougwaldron)
    https://github.com/w3c/webappsec-change-password-url/issues/15 



Pull requests
-------------
* w3c/webappsec-credential-management (+1/-2/💬2)
  1 pull requests submitted:
  - fix .pr-preview.json to use index.bs, not index.src.html (by equalsJeffH)
    https://github.com/w3c/webappsec-credential-management/pull/173 [type:process] 

  2 pull requests received 2 new comments:
  - #170 Update Conditional UI mediation (1 by nsatragno)
    https://github.com/w3c/webappsec-credential-management/pull/170 [process:meta-pr] 
  - #155 Add "conditional mediation" (1 by nsatragno)
    https://github.com/w3c/webappsec-credential-management/pull/155 [enhancement] [CREDENTIAL] 

  2 pull requests merged:
  - fix .pr-preview.json to use index.bs, not index.src.html
    https://github.com/w3c/webappsec-credential-management/pull/173 [type:process] 
  - Update Conditional UI mediation
    https://github.com/w3c/webappsec-credential-management/pull/170 [process:meta-pr] 

* w3c/permissions (+7/-6/💬6)
  7 pull requests submitted:
  - Editorial: Discuss how query() makes abuse harder to detect. (by miketaylr)
    https://github.com/w3c/permissions/pull/306 
  - Remove PushPermissionDescriptor, moved to Push API (by marcoscaceres)
    https://github.com/w3c/permissions/pull/305 
  - Remove MidiPermissionDescriptor, now in MIDI spec (by marcoscaceres)
    https://github.com/w3c/permissions/pull/304 
  - Editorial: Get rid of "dot" notation in algorithms (by miketaylr)
    https://github.com/w3c/permissions/pull/303 
  - Add + export definition of express permission (by marcoscaceres)
    https://github.com/w3c/permissions/pull/301 
  - chore(tidy): tidy up document (by github-actions)
    https://github.com/w3c/permissions/pull/300 
  - Chore: Link issue #278 using magical ReSpec issue feature (by miketaylr)
    https://github.com/w3c/permissions/pull/299 

  6 pull requests received 6 new comments:
  - #306 Editorial: Discuss how query() makes abuse harder to detect. (1 by miketaylr)
    https://github.com/w3c/permissions/pull/306 
  - #305 Remove PushPermissionDescriptor, moved to Push API (1 by marcoscaceres)
    https://github.com/w3c/permissions/pull/305 
  - #304 Remove MidiPermissionDescriptor, now in MIDI spec (1 by miketaylr)
    https://github.com/w3c/permissions/pull/304 
  - #303 Editorial: Get rid of "dot" notation in algorithms (1 by miketaylr)
    https://github.com/w3c/permissions/pull/303 
  - #300 chore(tidy): tidy up document (1 by w3cbot)
    https://github.com/w3c/permissions/pull/300 
  - #286 Rename PermissionName enum to PowerfulFeatureName (1 by marcoscaceres)
    https://github.com/w3c/permissions/pull/286 

  6 pull requests merged:
  - Editorial: Discuss how query() makes abuse harder to detect.
    https://github.com/w3c/permissions/pull/306 
  - Remove PushPermissionDescriptor, moved to Push API
    https://github.com/w3c/permissions/pull/305 
  - Editorial: Get rid of "dot" notation in algorithms
    https://github.com/w3c/permissions/pull/303 
  - Add + export definition of express permission
    https://github.com/w3c/permissions/pull/301 
  - chore(tidy): tidy up document
    https://github.com/w3c/permissions/pull/300 
  - Chore: Link issue #278 using magical ReSpec issue feature
    https://github.com/w3c/permissions/pull/299 

* w3c/webappsec-permissions-policy (+1/-1/💬1)
  1 pull requests submitted:
  - Add window-placement experimental feature (by michaelwasserman)
    https://github.com/w3c/webappsec-permissions-policy/pull/436 

  1 pull requests received 1 new comments:
  - #436 Add window-placement experimental feature (1 by michaelwasserman)
    https://github.com/w3c/webappsec-permissions-policy/pull/436 

  1 pull requests merged:
  - Add window-placement experimental feature
    https://github.com/w3c/webappsec-permissions-policy/pull/436 

* w3c/webappsec-trusted-types (+0/-0/💬1)
  1 pull requests received 1 new comments:
  - #350 Spec draft for fromLiteral method. See #347. (1 by craigfrancis)
    https://github.com/w3c/webappsec-trusted-types/pull/350 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/w3c/webappsec
* https://github.com/w3c/webappsec-subresource-integrity
* https://github.com/w3c/webappsec-csp
* https://github.com/w3c/webappsec-mixed-content
* https://github.com/w3c/webappsec-upgrade-insecure-requests
* https://github.com/w3c/webappsec-credential-management
* https://github.com/w3c/permissions
* https://github.com/w3c/webappsec-referrer-policy
* https://github.com/w3c/webappsec-secure-contexts
* https://github.com/w3c/webappsec-clear-site-data
* https://github.com/w3c/webappsec-cowl
* https://github.com/w3c/webappsec-epr
* https://github.com/w3c/webappsec-suborigins
* https://github.com/w3c/webappsec-cspee
* https://github.com/w3c/webappsec-permissions-policy
* https://github.com/w3c/webappsec-fetch-metadata
* https://github.com/w3c/webappsec-trusted-types
* https://github.com/w3c/webappsec-change-password-url
* https://github.com/w3c/webappsec-post-spectre-webdev


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config