-
Notifications
You must be signed in to change notification settings - Fork 78
Issues: w3c/webappsec-csp
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Author
Label
Projects
Milestones
Assignee
Sort
Issues list
Should font-src reporting kick in on font-face reference or font request?
#677
opened Aug 22, 2024 by
robinwhittleton
Consider using SecurityPolicyViolationEvent.sourceFile a USVString
#674
opened Jul 31, 2024 by
emilio
Add new CSP sandbox directive to allow SameSite=None cookies on top-level frames
#664
opened May 24, 2024 by
DCtheTall
frame-src is not effective in restricting the possible origins of subframes
#662
opened May 21, 2024 by
antosart
"Is element nonceable" not applied to non-<script> elements in Chrome?
#643
opened Feb 12, 2024 by
evilpie
Resource hint blocking / "least restrictive" as specified does nothing?
#633
opened Dec 27, 2023 by
evilpie
frame-src using the fetch instead of the navigational check - can end up checking the wrong policies
#624
opened Nov 7, 2023 by
antosart
Allow
script-src 'unsafe-hashes'
for eval()
and new Function
#623
opened Nov 3, 2023 by
nicolo-ribaudo
Algorithms should be <dfn> in prose instead of linked to headers
#618
opened Aug 30, 2023 by
johnathan79717
Previous Next
ProTip!
Follow long discussions with comments:>50.