List view

[document] plugin-types clarification

Status: Closed (completed).

#58 In w3c/webappsec-csp;

· by jonathanKingston was closed on May 9, 2017

WPT tests tracker

Status: Closed (completed).

#276 In w3c/webappsec-csp;

· by andypaicu was closed on Nov 6, 2018

Wrap up CSP 3, Move to CSP 4

Status: Closed (completed).

#275 In w3c/webappsec-csp;

· by shhnjk was closed on Oct 8, 2018

Allow report-uri in meta tags.

Status: Closed (completed).

#278 In w3c/webappsec-csp;

· by ScottHelme was closed on Jan 8, 2018

bikeshed: LINK ERROR: No 'idl' refs found for 'nonce' with for='NoncedElement'

Status: Closed (completed).

#281 In w3c/webappsec-csp;

· by sideshowbarker was closed on Oct 8, 2018

"Whitelisting external JavaScript with hashes" incorrectly assumes encoding of sources

Status: Closed (completed).

#110 In w3c/webappsec-csp;

· by joelweinberger was closed on Oct 8, 2018

Hash encodings should be converted to UTF-8

Status: Closed (completed).

#109 In w3c/webappsec-csp;

· by joelweinberger was closed on Oct 9, 2018

Specify behavior of prefetch requests

Status: Closed (completed).

#107 In w3c/webappsec-csp;

· by dveditz was closed on Jan 15, 2018

Add a note about 'strict-dynamic' allowing injections into non-parser-inserted script URIs to be exploitable

Status: Closed (completed).

#97 In w3c/webappsec-csp;

· by arturjanc was closed on Oct 23, 2018

Prevent nonce stealing by looking for "<script" in attributes of nonced scripts

Status: Closed (completed).

#98 In w3c/webappsec-csp;

· by arturjanc was closed on Jan 8, 2018

Add "disposition" attribute to SecurityPolicyViolationEvent

Status: Closed (completed).

#94 In w3c/webappsec-csp;

· by shekyan was closed on Sep 7, 2016

Permit blocking of certain hosts

Status: Closed (completed).

#100 In w3c/webappsec-csp;

· by yoavweiss was closed on Jan 8, 2018

Remove worker references from child-src section

Status: Closed (completed).

#239 In w3c/webappsec-csp;

· by dveditz was closed on Sep 12, 2018

Add note about the importance of preventing nonce exfiltration/reuse

Status: Closed (completed).

#258 In w3c/webappsec-csp;

· by arturjanc was closed on Nov 9, 2018

Incorrect form-action pre-navigation check text?

Status: Closed (completed).

#257 In w3c/webappsec-csp;

· by christhompson was closed on Oct 8, 2018

What is the 'self' of sandboxed page?

Status: Closed (completed).

#260 In w3c/webappsec-csp;

· by shhnjk was closed on Nov 28, 2018

Is inheritance of 'self' to local-scheme appropriate?

Status: Closed (completed).

#259 In w3c/webappsec-csp;

· by shhnjk was closed on Nov 28, 2018

Wrong url on example 6

Status: Closed (completed).

#286 In w3c/webappsec-csp;

· by murillo128 was closed on Sep 14, 2018

SecurityPolicyViolationEvent needs more USVString

Status: Closed (completed).

#266 In w3c/webappsec-csp;

· by annevk was closed on Nov 5, 2018

Line and column number types

Status: Closed (completed).

#268 In w3c/webappsec-csp;

· by annevk was closed on Nov 5, 2018

Specify browser behavior for CSP headers on 304 (not modified) responses

Status: Closed (completed).

#161 In w3c/webappsec-csp;

· by lweichselbaum was closed on Oct 24, 2018

CSP3: Note that the <code>disown-opener</code> directive needs to be sent in the HTTP headers

Status: Closed (completed).

#193 In w3c/webappsec-csp;

· by jwatt was closed on Oct 9, 2017

What does it mean to alias a policy from a CSP list?

Status: Closed (completed).

#207 In w3c/webappsec-csp;

· by bzbarsky was closed on Dec 11, 2017

Documents are not global objects

Status: Closed (completed).

#208 In w3c/webappsec-csp;

· by bzbarsky was closed on Sep 18, 2018

Please sort out who's responsible for a srcdoc document's CSP

Status: Closed (completed).

#209 In w3c/webappsec-csp;

· by bzbarsky was closed on Nov 8, 2018