Weekly github digest (WebAppSec specs)

Issues
------
* w3c/webappsec (+0/-0/💬2)
  1 issues received 2 new comments:
  - #648 Planning the 2024-04-17. (2 by Frosne, twiss)
    https://github.com/w3c/webappsec/issues/648 [agenda] 

* w3c/webappsec-csp (+1/-0/💬3)
  1 issues created:
  - host-part match doesn't handle * (by evilpie)
    https://github.com/w3c/webappsec-csp/issues/656 

  3 issues received 3 new comments:
  - #656 host-part match doesn't handle * (1 by mikewest)
    https://github.com/w3c/webappsec-csp/issues/656 
  - #487 CSP script-src self and blobs (1 by evilpie)
    https://github.com/w3c/webappsec-csp/issues/487 
  - #277 Allow CSP-Report-Only in meta tags. (1 by lukewarlow)
    https://github.com/w3c/webappsec-csp/issues/277 

* w3c/webappsec-trusted-types (+2/-3/💬5)
  2 issues created:
  - faq.md outdated (by lukewarlow)
    https://github.com/w3c/trusted-types/issues/505 
  - `createPolicy`'s permitted policy names are inconsistent with CSP's permitted policy names (by mbrodesser-Igalia)
    https://github.com/w3c/trusted-types/issues/504 

  3 issues received 5 new comments:
  - #505 faq.md outdated (1 by lukewarlow)
    https://github.com/w3c/trusted-types/issues/505 
  - #504 `createPolicy`'s permitted policy names are inconsistent with CSP's permitted policy names (3 by annevk, lukewarlow, mbrodesser-Igalia)
    https://github.com/w3c/trusted-types/issues/504 
  - #425 Improve test coverage for DOM integration in WPT (1 by mbrodesser-Igalia)
    https://github.com/w3c/trusted-types/issues/425 

  3 issues closed:
  - Integration with DOM APIs https://github.com/w3c/trusted-types/issues/438 [spec] 
  - faq.md outdated https://github.com/w3c/trusted-types/issues/505 
  - Improve test coverage for DOM integration in WPT https://github.com/w3c/trusted-types/issues/425 



Pull requests
-------------
* w3c/webappsec-csp (+1/-0/💬2)
  1 pull requests submitted:
  - Correctly match `*` as a `host-part`. (by mikewest)
    https://github.com/w3c/webappsec-csp/pull/657 

  1 pull requests received 2 new comments:
  - #657 Correctly match `*` as a `host-part`. (2 by mikewest)
    https://github.com/w3c/webappsec-csp/pull/657 

* w3c/webappsec-trusted-types (+2/-5/💬5)
  2 pull requests submitted:
  - Fix links to innerHTML property. (by lukewarlow)
    https://github.com/w3c/trusted-types/pull/503 
  - Update slot syntax to remove square brackets. (by lukewarlow)
    https://github.com/w3c/trusted-types/pull/502 

  4 pull requests received 5 new comments:
  - #502 Update slots (2 by lukewarlow)
    https://github.com/w3c/trusted-types/pull/502 
  - #497 Fix type issue between get tt compliant string and validate string in context (1 by lukewarlow)
    https://github.com/w3c/trusted-types/pull/497 
  - #495 Remove outdated event handler section (1 by lukewarlow)
    https://github.com/w3c/trusted-types/pull/495 
  - #460 Fix IDL of getAttributeType and getPropertyType (1 by lukewarlow)
    https://github.com/w3c/trusted-types/pull/460 

  5 pull requests merged:
  - Update spec to match latest ECMA262 proposal shape.
    https://github.com/w3c/trusted-types/pull/501 
  - Update slots
    https://github.com/w3c/trusted-types/pull/502 
  - Fix links to innerHTML property.
    https://github.com/w3c/trusted-types/pull/503 
  - Fix IDL of getAttributeType and getPropertyType
    https://github.com/w3c/trusted-types/pull/460 
  - Remove outdated event handler section
    https://github.com/w3c/trusted-types/pull/495 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/w3c/webappsec
* https://github.com/w3c/webappsec-subresource-integrity
* https://github.com/w3c/webappsec-csp
* https://github.com/w3c/webappsec-mixed-content
* https://github.com/w3c/webappsec-upgrade-insecure-requests
* https://github.com/w3c/webappsec-credential-management
* https://github.com/w3c/permissions
* https://github.com/w3c/permissions-registry
* https://github.com/w3c/webappsec-referrer-policy
* https://github.com/w3c/webappsec-secure-contexts
* https://github.com/w3c/webappsec-clear-site-data
* https://github.com/w3c/webappsec-cowl
* https://github.com/w3c/webappsec-epr
* https://github.com/w3c/webappsec-suborigins
* https://github.com/w3c/webappsec-cspee
* https://github.com/w3c/webappsec-permissions-policy
* https://github.com/w3c/webappsec-fetch-metadata
* https://github.com/w3c/webappsec-trusted-types
* https://github.com/w3c/webappsec-change-password-url
* https://github.com/w3c/webappsec-post-spectre-webdev


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config