Skip to content

Issues: w3c/webappsec

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
90 Open 250 Closed
90 Open 250 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

[CSP] Avoid RFC2119 keywords in non-normative sections CSP
#26 opened May 27, 2014 by marcoscaceres updated Aug 18, 2014 CSP 3
3
Consider a directive to set nosniff policy for a document's resources. CSP
#44 opened Aug 18, 2014 by mikewest updated Aug 18, 2014 CSP 3
[CSP] Define encoding used for reports CSP enhancement
#111 opened Dec 12, 2014 by hillbrad updated Dec 12, 2014 CSP 3
Capability detection for referrer-policy? REFERRER
#113 opened Dec 15, 2014 by hillbrad updated Dec 15, 2014 REFERRER-LC
@jeisinger
Support internationalized domain names directly. CSP
#145 opened Jan 16, 2015 by mikewest updated Jan 16, 2015 CSP 3
CSP: Maybe removing <meta> should remove its policy? CSP
#153 opened Jan 20, 2015 by mikewest updated Jan 20, 2015 CSP 3
1
CSP3: Consider IP syntax support CSP
#170 opened Feb 9, 2015 by joelweinberger updated Feb 10, 2015 CSP 3
1
CSP3: Service Worker "kill switch" CSP
#174 opened Feb 11, 2015 by joelweinberger updated Feb 19, 2015 CSP 3
3
CSP reports for eval() and inline script are identical CSP
#52 opened Sep 2, 2014 by kravietz updated Feb 20, 2015 CSP 3
8
SI: Talk about Image Elements with srcset attributes SRI
#5 opened Mar 10, 2014 by devd updated Mar 2, 2015 SRI-next
4
SRI: Integration to Worker constructor seems brittle and not very future proof SRI
#75 opened Nov 3, 2014 by mozfreddyb updated Mar 3, 2015 SRI-next
7
SRI object support SRI
#210 opened Mar 8, 2015 by devd updated Mar 23, 2015 SRI-next
8
CSP: Allow directive references. CSP
#219 opened Mar 19, 2015 by mikewest updated Mar 27, 2015 CSP 3
5
CSP3: Reconsider report sampling. CSP
#230 opened Mar 26, 2015 by mikewest updated Mar 27, 2015 CSP 3
2
CSP3: Allow report batching. CSP
#229 opened Mar 26, 2015 by mikewest updated Mar 27, 2015 CSP 3
6
SRI: One resource, many representations. SRI
#235 opened Apr 2, 2015 by mikewest updated Apr 8, 2015 SRI-next
48
CREDENTIAL: expanding public suffix scope CREDENTIAL
#248 opened Apr 13, 2015 by annevk updated Apr 16, 2015 CREDENTIALS: Level 1
1
CREDENTIAL: Support 3rd party credential storage and retrieval protocol CREDENTIAL
#254 opened Apr 15, 2015 by dlongley updated Apr 16, 2015 CREDENTIALS: Future Work
9
CREDENTIAL: Use Linked Data for extending credentials CREDENTIAL
#255 opened Apr 15, 2015 by dlongley updated Apr 16, 2015 CREDENTIALS: Future Work
3
SRI spec should insist on checking mime-type if specified SRI
#211 opened Mar 8, 2015 by devd updated Apr 20, 2015 SRI-next
2
CREDENTIAL: avatar CREDENTIAL
#247 opened Apr 13, 2015 by annevk updated Apr 27, 2015 CREDENTIALS: Level 1
4
CSP: Duplicate Directives should "add" instead of be ignored CSP
#221 opened Mar 20, 2015 by devd updated Apr 28, 2015 CSP 3
11
CSP: Change the scope of the Permissions API CSP
#312 opened Apr 27, 2015 by andyearnshaw updated Apr 29, 2015
4
Add a violation report example SRI
#189 opened Feb 28, 2015 by fmarier updated Apr 30, 2015 SRI-next
9
REFERRER: Describe behavior for about:blank inheritance. REFERRER
#328 opened May 1, 2015 by mikewest updated May 1, 2015
ProTip! Exclude everything labeled bug with -label:bug.