List view

Add something like <code>'secure-contexts'</code> to <code>frame-ancestors</code>'s source list.

Status: Closed (completed).

#23 In w3c/webappsec-csp;

· by mikewest was closed on May 10, 2017

Setting policy when origins are not known ahead of time

Status: Closed (completed).

#24 In w3c/webappsec-csp;

· by sandinmyjoints was closed on Aug 2, 2019

Stricter attribute parsing

Status: Closed (completed).

#175 In w3c/webappsec-csp;

· by craigfrancis was closed on May 10, 2017

The <code>disown-opener</code> directive is not the right model

Status: Closed (completed).

#194 In w3c/webappsec-csp;

· by jwatt was closed on Aug 8, 2019

CSP3: Consider adding a 'no-console-log' directive

Status: Closed (completed).

#217 In w3c/webappsec-csp;

· by april was closed on Jun 13, 2018

Thoughts on letting CSP govern attributes that must appear in Set-Cookie

Status: Closed (completed).

#152 In w3c/webappsec-csp;

· by aidantwoods was closed on Aug 27, 2018

WebRTC can be used for exfiltration

Status: Closed (completed).

#92 In w3c/webappsec-csp;

· by annevk was closed on Mar 21, 2024

Add <code>trusted-types-eval</code> source expression for <code>script-src</code>

addition/proposalNew features or enhancementsNew features or enhancements

Status: Merged (completed).

w3c/webappsec-cspnumber 665

#665 In w3c/webappsec-csp;

· by lukewarlow was closed on Jan 15, 2025