List view

Allow public-key signatures in CSP allowed script sources

CSP

Status: Open.

#436 In w3c/webappsec;

· ekobrin opened on Jul 23, 2015

CSP: Provide a way to restrict domain of document.cookie

CSP

Status: Open.

#432 In w3c/webappsec;

· kentonv opened on Jul 21, 2015

CSP: specify whether unsafe-inline or unsafe-eval was violated in violation reports

CSP

Status: Open.

#401 In w3c/webappsec;

· pames opened on Jun 12, 2015

[CSP] Broaden nonce-value grammar

CSP

Status: Open.

#370 In w3c/webappsec;

· shekyan opened on May 18, 2015

[CSP] base64-value grammar doesn't allow for alternative 63rd and 64th characters

CSP

Status: Open.

#364 In w3c/webappsec;

· shekyan opened on May 18, 2015

[CSP] Enforcing CSP for Service Workers

CSP

Status: Open.

#350 In w3c/webappsec;

· jungkees opened on May 14, 2015

CSP3: Reconsider report sampling.

CSP

Status: Open.

#230 In w3c/webappsec;

· mikewest opened on Mar 26, 2015

CSP3: Allow report batching.

CSP

Status: Open.

#229 In w3c/webappsec;

· mikewest opened on Mar 26, 2015

CSP: Duplicate Directives should "add" instead of be ignored

CSP

Status: Open.

#221 In w3c/webappsec;

· devd opened on Mar 20, 2015

CSP: Allow directive references.

CSP

Status: Open.

#219 In w3c/webappsec;

· mikewest opened on Mar 19, 2015

CSP: Consider a <code>permissions</code> directive.

CSP

Status: Open.

#206 In w3c/webappsec;

· mikewest opened on Mar 5, 2015

CSP3: Service Worker "kill switch"

CSP

Status: Open.

#174 In w3c/webappsec;

· joelweinberger opened on Feb 11, 2015

CSP3: Consider IP syntax support

CSP

Status: Open.

#170 In w3c/webappsec;

· joelweinberger opened on Feb 9, 2015

CSP: Maybe removing &lt;meta&gt; should remove its policy?

CSP

Status: Open.

#153 In w3c/webappsec;

· mikewest opened on Jan 20, 2015

Support internationalized domain names directly.

CSP

Status: Open.

#145 In w3c/webappsec;

· mikewest opened on Jan 16, 2015

[CSP] Define encoding used for reports

CSP

enhancement

Status: Open.

#111 In w3c/webappsec;

· hillbrad opened on Dec 12, 2014

CSP reports for eval() and inline script are identical

CSP

Status: Open.

#52 In w3c/webappsec;

· kravietz opened on Sep 2, 2014

Consider a directive to set <code>nosniff</code> policy for a document's resources.

CSP

Status: Open.

#44 In w3c/webappsec;

· mikewest opened on Aug 18, 2014

[CSP] Avoid RFC2119 keywords in non-normative sections

CSP

Status: Open.

#26 In w3c/webappsec;

· marcoscaceres opened on May 27, 2014

[CSP] Server is not a valid conforming class of product

CSP

Status: Open.

#25 In w3c/webappsec;

· marcoscaceres opened on May 27, 2014