Skip to content

Conversation

@yoavweiss
Copy link
Contributor

"Strip URL for reporting" is used in CSP and now also in SRI. A discussion on w3c/webappsec-csp#725 concluded that Reporting will be a better home for it than CSP. This PR does that.

@yoavweiss yoavweiss requested a review from mikewest May 26, 2025 23:30
Copy link
Member

@mikewest mikewest left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.

That said, we should probably figure out a reasonable way to have https://w3c.github.io/webappsec-referrer-policy/#strip-url rely on this as well, but that's separable.

@mikewest mikewest merged commit a1c565f into main May 27, 2025
2 of 3 checks passed
github-actions bot added a commit that referenced this pull request May 27, 2025
SHA: a1c565f
Reason: push, by mikewest

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@mikewest mikewest deleted the strip_url branch June 17, 2025 10:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants