Weekly github digest (WebAppSec specs)

Issues
------
* w3c/webappsec (+1/-1/💬0)
  1 issues created:
  - Planning 2026-04-15 (by mikewest)
    https://github.com/w3c/webappsec/issues/700 

  1 issues closed:
  - Planning 2026-02-18 https://github.com/w3c/webappsec/issues/699 

* w3c/webappsec-csp (+0/-0/💬10)
  2 issues received 10 new comments:
  - #735 Implementation differences with "Strip URL for use in reports" (6 by TimvdLippe, annevk)
    https://github.com/w3c/webappsec-csp/issues/735 
  - #487 CSP script-src self and blobs (4 by annevk, antosart, roberto-apple)
    https://github.com/w3c/webappsec-csp/issues/487 

* w3c/webappsec-clear-site-data (+1/-0/💬0)
  1 issues created:
  - Add support for clearing compression dictionary storage (by pmeenan)
    https://github.com/w3c/webappsec-clear-site-data/issues/93 

* w3c/webappsec-fetch-metadata (+1/-0/💬2)
  1 issues created:
  - Integration with Speculation Rules prefetch/prerender (by zcorpan)
    https://github.com/w3c/webappsec-fetch-metadata/issues/97 

  1 issues received 2 new comments:
  - #97 Integration with Speculation Rules prefetch/prerender (2 by mikewest)
    https://github.com/w3c/webappsec-fetch-metadata/issues/97 



Pull requests
-------------
* w3c/webappsec-subresource-integrity (+1/-0/💬2)
  1 pull requests submitted:
  - 169  (by kfranqueiro)
    https://github.com/w3c/webappsec-subresource-integrity/pull/169 

  2 pull requests received 2 new comments:
  - #169 Makefile: Replace CSSWG-API-specific force=1 with die-on=nothing (1 by w3cbot)
    https://github.com/w3c/webappsec-subresource-integrity/pull/169 
  - #168 Fix Bikeshed API endpoint in Makefile (1 by mozfreddyb)
    https://github.com/w3c/webappsec-subresource-integrity/pull/168 

* w3c/webappsec-csp (+0/-0/💬1)
  1 pull requests received 1 new comments:
  - #799 Add WebDriver BiDi CSP bypass checks (1 by juliandescottes)
    https://github.com/w3c/webappsec-csp/pull/799 

* w3c/webappsec-referrer-policy (+1/-0/💬2)
  1 pull requests submitted:
  - 178  (by kfranqueiro)
    https://github.com/w3c/webappsec-referrer-policy/pull/178 

  1 pull requests received 2 new comments:
  - #178 Update from api.csswg.org/bikeshed to spec-generator (2 by mikewest, w3cbot)
    https://github.com/w3c/webappsec-referrer-policy/pull/178 

* w3c/webappsec-clear-site-data (+1/-0/💬2)
  1 pull requests submitted:
  - 94  (by pmeenan)
    https://github.com/w3c/webappsec-clear-site-data/pull/94 

  1 pull requests received 2 new comments:
  - #94 Added references to clearing the compression dictionary caches. (2 by mikewest, pmeenan)
    https://github.com/w3c/webappsec-clear-site-data/pull/94 

* w3c/webappsec-suborigins (+1/-0/💬1)
  1 pull requests submitted:
  - 82  (by kfranqueiro)
    https://github.com/w3c/webappsec-suborigins/pull/82 

  1 pull requests received 1 new comments:
  - #82 Update from api.csswg.org/bikeshed to spec-generator (1 by w3cbot)
    https://github.com/w3c/webappsec-suborigins/pull/82 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/w3c/webappsec
* https://github.com/w3c/webappsec-subresource-integrity
* https://github.com/w3c/webappsec-csp
* https://github.com/w3c/webappsec-mixed-content
* https://github.com/w3c/webappsec-upgrade-insecure-requests
* https://github.com/w3c/webappsec-credential-management
* https://github.com/w3c/permissions
* https://github.com/w3c/permissions-registry
* https://github.com/w3c/webappsec-referrer-policy
* https://github.com/w3c/webappsec-secure-contexts
* https://github.com/w3c/webappsec-clear-site-data
* https://github.com/w3c/webappsec-cowl
* https://github.com/w3c/webappsec-epr
* https://github.com/w3c/webappsec-suborigins
* https://github.com/w3c/webappsec-cspee
* https://github.com/w3c/webappsec-permissions-policy
* https://github.com/w3c/webappsec-fetch-metadata
* https://github.com/w3c/webappsec-trusted-types
* https://github.com/w3c/webappsec-change-password-url
* https://github.com/w3c/webappsec-post-spectre-webdev


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config