Skip to content

Issues: w3c/webappsec

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

88 Open 248 Closed
88 Open 248 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Surfacing capability URLs
#657 opened Sep 11, 2024 by yoavweiss
1
CSP and data exfiltration
#656 opened Sep 11, 2024 by yoavweiss
20
Revive require-sri-for?
#655 opened Sep 11, 2024 by yoavweiss
Support for clearing Client Hints in Clear-Site-Data header
#628 opened Jul 7, 2023 by arichiv
@arichiv
Different behavior with CSP and HTML imports
#616 opened Oct 22, 2022 by lmuntaner
Transfer issues to appropriate repos?
#601 opened Aug 12, 2021 by marcoscaceres
Move to auto-publish
#600 opened Aug 12, 2021 by marcoscaceres
@plehegar
[meta] Adopting the Sanitizer API charter
#596 opened Jul 12, 2021 by mozfreddyb
24
Concerns with moving to living standard model
#580 opened Apr 26, 2021 by pes10k
4
Web Applications should not have internet access by default
#578 opened Mar 30, 2021 by ghost
9
CSP: Allow precise control of cookies
#561 opened Dec 22, 2019 by sindastra
5
New permission to access a resource even when CORS headers are not set in the response
#560 opened Dec 19, 2019 by jarrodek
CSP and HTML Modules
#544 opened Jan 25, 2019 by dandclark
9
Distrusting the web server
#538 opened Nov 18, 2018 by llebout
33
Report Iframe nesting level instead of using frame-ancestors directive
#537 opened Oct 28, 2018 by moonyowl
1
Restricting JavaScript from accessing secrets
#536 opened Nov 14, 2017 by craigfrancis
2
Intersection Observer review
#533 opened Sep 15, 2017 by LJWatson
[SRI] Clarification regarding "Parse metadata" algorithm
#531 opened Jun 24, 2017 by hrj
2
#CredAPI Signing-Out: maybe user agent MUST provide UI for changing mediation?
#530 opened May 30, 2017 by yackermann
1
HPKP: Set Content-Type header field in reports
#526 opened Jan 30, 2017 by ScottHelme
4
[upgrade-insecure-requests] doc reference to wrong document
#525 opened Jan 9, 2017 by elinesterov
1
Clarify CSP header recommendations for non-HTML pages
#520 opened Oct 12, 2016 by kravietz
8
CSP3: The effect of multiple policies
#515 opened Apr 17, 2016 by april
3
CSP2: Default value of default-src is incorrect
#514 opened Apr 15, 2016 by april
@hillbrad
11
Usage of referrerpolicy="no-referrer" for DoS attacks
#511 opened Mar 2, 2016 by Yaffle
ProTip! What’s not been updated in a month: updated:<2024-11-25.