Weekly github digest (WebAppSec specs)

Issues
------
* w3c/webappsec-csp (+1/-0/💬5)
  1 issues created:
  - Link to updated reporting interface (by jyasskin)
    https://github.com/w3c/webappsec-csp/issues/565 

  3 issues received 5 new comments:
  - #563 The editor's draft includes several features that no one has shipped. (3 by domenic, mikewest, noamr)
    https://github.com/w3c/webappsec-csp/issues/563 
  - #444 Make user's the driver of the user-agent again: bookmarklets, userscripts (1 by rektide)
    https://github.com/w3c/webappsec-csp/issues/444 
  - #8 CSP: form-action and redirects (1 by mig5)
    https://github.com/w3c/webappsec-csp/issues/8 [CSP] 

* w3c/webappsec-cspee (+0/-0/💬1)
  1 issues received 1 new comments:
  - #26 Buggy behavior with multiple nested frames (1 by qabandi)
    https://github.com/w3c/webappsec-cspee/issues/26 

* w3c/webappsec-permissions-policy (+1/-0/💬6)
  1 issues created:
  - "Process permissions policy attributes" unclear (by annevk)
    https://github.com/w3c/webappsec-permissions-policy/issues/489 

  4 issues received 6 new comments:
  - #481 Proposal: allow grouping permissions by year (3 by annevk, ecki)
    https://github.com/w3c/webappsec-permissions-policy/issues/481 
  - #480 Denying self while still allowing subframes (1 by annevk)
    https://github.com/w3c/webappsec-permissions-policy/issues/480 
  - #444 Permissions Policy unload (1 by fergald)
    https://github.com/w3c/webappsec-permissions-policy/issues/444 
  - #386 Usefulness of reporting in Permissions Policy (1 by annevk)
    https://github.com/w3c/webappsec-permissions-policy/issues/386 



Pull requests
-------------
* w3c/webappsec-csp (+2/-0/💬2)
  2 pull requests submitted:
  - Add support for the webidentity destination (by cbiesinger)
    https://github.com/w3c/webappsec-csp/pull/567 
  - Fix link to updated reporting interface (by antosart)
    https://github.com/w3c/webappsec-csp/pull/566 

  1 pull requests received 2 new comments:
  - #567 Add support for the webidentity destination (2 by cbiesinger, clelland)
    https://github.com/w3c/webappsec-csp/pull/567 

* w3c/webappsec-trusted-types (+0/-1/💬0)
  1 pull requests merged:
  - Modify the script slot setting algorithms.
    https://github.com/w3c/trusted-types/pull/372 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/w3c/webappsec
* https://github.com/w3c/webappsec-subresource-integrity
* https://github.com/w3c/webappsec-csp
* https://github.com/w3c/webappsec-mixed-content
* https://github.com/w3c/webappsec-upgrade-insecure-requests
* https://github.com/w3c/webappsec-credential-management
* https://github.com/w3c/permissions
* https://github.com/w3c/permissions-registry
* https://github.com/w3c/webappsec-referrer-policy
* https://github.com/w3c/webappsec-secure-contexts
* https://github.com/w3c/webappsec-clear-site-data
* https://github.com/w3c/webappsec-cowl
* https://github.com/w3c/webappsec-epr
* https://github.com/w3c/webappsec-suborigins
* https://github.com/w3c/webappsec-cspee
* https://github.com/w3c/webappsec-permissions-policy
* https://github.com/w3c/webappsec-fetch-metadata
* https://github.com/w3c/webappsec-trusted-types
* https://github.com/w3c/webappsec-change-password-url
* https://github.com/w3c/webappsec-post-spectre-webdev


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Monday, 3 October 2022 17:00:37 UTC