Weekly github digest (WebAppSec specs)

Issues
------
* w3c/webappsec-cspee (+1/-5/💬6)
  1 issues created:
  - Broken links in Content Security Policy: Embedded Enforcement (by dontcallmedom-bot)
    https://github.com/w3c/webappsec-cspee/issues/31 

  5 issues received 6 new comments:
  - #30 Redirect https://w3c.github.io/webappsec-csp/embedded/ (2 by mikewest)
    https://github.com/w3c/webappsec-cspee/issues/30 
  - #27 Broken references in Content Security Policy: Embedded Enforcement (1 by mikewest)
    https://github.com/w3c/webappsec-cspee/issues/27 
  - #24 Editor's draft not getting autoupdated (1 by mikewest)
    https://github.com/w3c/webappsec-cspee/issues/24 
  - #22 Limit length of 'csp' attribute (1 by mikewest)
    https://github.com/w3c/webappsec-cspee/issues/22 
  - #10 Should file and filesystem schemes allow blanket enforcement? (1 by mikewest)
    https://github.com/w3c/webappsec-cspee/issues/10 

  5 issues closed:
  - Should file and filesystem schemes allow blanket enforcement? https://github.com/w3c/webappsec-cspee/issues/10 
  - Editor's draft not getting autoupdated https://github.com/w3c/webappsec-cspee/issues/24 
  - Limit length of 'csp' attribute https://github.com/w3c/webappsec-cspee/issues/22 
  - Broken references in Content Security Policy: Embedded Enforcement https://github.com/w3c/webappsec-cspee/issues/27 
  - Redirect https://w3c.github.io/webappsec-csp/embedded/ https://github.com/w3c/webappsec-cspee/issues/30 

* w3c/webappsec-fetch-metadata (+1/-1/💬0)
  1 issues created:
  - Hacked phone (by danielsusan128128)
    https://github.com/w3c/webappsec-fetch-metadata/issues/98 

  1 issues closed:
  - Hacked phone https://github.com/w3c/webappsec-fetch-metadata/issues/98 



Pull requests
-------------
* w3c/webappsec-cspee (+0/-0/💬4)
  4 pull requests received 4 new comments:
  - #21 Limit length of CSP attribute (1 by mikewest)
    https://github.com/w3c/webappsec-cspee/pull/21 
  - #15 Fix example of non-similar CSP sources with different ports (1 by mikewest)
    https://github.com/w3c/webappsec-cspee/pull/15 
  - #13 Fix examples involving wildcard host matching. (1 by mikewest)
    https://github.com/w3c/webappsec-cspee/pull/13 
  - #9 Fix subsume-source-expressions algorithm (1 by mikewest)
    https://github.com/w3c/webappsec-cspee/pull/9 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/w3c/webappsec
* https://github.com/w3c/webappsec-subresource-integrity
* https://github.com/w3c/webappsec-csp
* https://github.com/w3c/webappsec-mixed-content
* https://github.com/w3c/webappsec-upgrade-insecure-requests
* https://github.com/w3c/webappsec-credential-management
* https://github.com/w3c/permissions
* https://github.com/w3c/permissions-registry
* https://github.com/w3c/webappsec-referrer-policy
* https://github.com/w3c/webappsec-secure-contexts
* https://github.com/w3c/webappsec-clear-site-data
* https://github.com/w3c/webappsec-cowl
* https://github.com/w3c/webappsec-epr
* https://github.com/w3c/webappsec-suborigins
* https://github.com/w3c/webappsec-cspee
* https://github.com/w3c/webappsec-permissions-policy
* https://github.com/w3c/webappsec-fetch-metadata
* https://github.com/w3c/webappsec-trusted-types
* https://github.com/w3c/webappsec-change-password-url
* https://github.com/w3c/webappsec-post-spectre-webdev


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Monday, 27 April 2026 17:00:47 UTC