Skip to content

Features
Business
Explore
Marketplace
Pricing

This repository

Sign in or Sign up

Watch 97
Star 279
Fork 77

w3c/webappsec

Code Issues 84 Pull requests 3 Projects 0 Wiki Insights

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Pick a username

Email Address

Password

Already on GitHub? Sign in to your account

Labels Milestones

84 Open 202 Closed

Filter by author

Filter by label

Filter by project

Filter by milestone

Filter by who’s assigned

Sort by

Least commented

Recently updated

Least recently updated

Most reactions

'strict-dynamic' should not be bound to only nonces/hashes
#534 opened Oct 4, 2017 by april
Intersection Observer review
#533 opened Sep 15, 2017 by LJWatson
Content-Security-Policy didn't get into the IANA message header registry
#532 opened Aug 31, 2017 by jyasskin
[SRI] Clarification regarding "Parse metadata" algorithm
#531 opened Jun 24, 2017 by hrj

2
#CredAPI Signing-Out: maybe user agent MUST provide UI for changing mediation?
#530 opened May 30, 2017 by herrjemand

1
HPKP: Set Content-Type header field in reports
#526 opened Jan 30, 2017 by ScottHelme

4
[upgrade-insecure-requests] doc reference to wrong document
#525 opened Jan 9, 2017 by ilyanesterov
Clarify CSP header recommendations for non-HTML pages
#520 opened Oct 12, 2016 by kravietz

1
CSP in single-page applications
#519 opened Oct 10, 2016 by MaceWindu
Way to disown window.opener and become a secure context
#517 opened Jul 25, 2016 by jakearchibald

4
CSP3: The effect of multiple policies
#515 opened Apr 17, 2016 by april

3
CSP2: Default value of default-src is incorrect
#514 opened Apr 15, 2016 by april

11
CSP: Consider dot-prefix domains for wildcard matching
#513 opened Apr 5, 2016 by 007
Usage of referrerpolicy="no-referrer" for DoS attacks
#511 opened Mar 2, 2016 by Yaffle
CSP: Consider a flag to turn off console logging for Report-Only
#508 opened Jan 19, 2016 by millisecond

11
Definition of "potentially secure origin" says nonsensical things about "about", and makes about: URLs not potentially secure URLs
#505 opened Oct 21, 2015 by bzbarsky
[SRI] Shared Cache through `sharedcache` attribute SRI
#504 opened Oct 13, 2015 by brillout SRI-next

2
SRI: Integrity enforcement on downloads SRI
#497 opened Oct 5, 2015 by jfbastien SRI-next

10
SRI: media fragments SRI
#493 opened Oct 1, 2015 by uecker SRI-next

3
SRI: needs integration with whatwg/html SRI
#486 opened Sep 24, 2015 by annevk The Future™
Add test cases for jar: scheme CSP
#479 opened Sep 18, 2015 by hillbrad

3
Referrer policy and Ping-From/Ping-To headers REFERRER
#469 opened Sep 10, 2015 by annevk

6
[SRI] Integrity option in importScripts SRI
#454 opened Aug 13, 2015 by matthewbauer SRI-next

10
[SRI] Shorter hashes SRI
#450 opened Aug 11, 2015 by devd SRI-next
[SRI] Support signatures/asymm key SRI
#449 opened Aug 11, 2015 by devd SRI-next

28

Previous 1 2 3 4 Next

ProTip! Adding no:label will show everything without a label.

© 2017 GitHub, Inc.
Terms
Privacy
Security
Status
Help

Contact GitHub
API
Training
Shop
Blog
About

You can't perform that action at this time.

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session.