Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added a note about fetch redirects being covered #359

Merged
merged 2 commits into from Nov 6, 2018

Conversation

andypaicu
Copy link
Collaborator

@andypaicu andypaicu commented Oct 24, 2018

@andypaicu
Copy link
Collaborator Author

Fixes #72

@andypaicu andypaicu merged commit df35fe4 into w3c:master Nov 6, 2018
april added a commit to april/webappsec-csp that referenced this pull request Nov 12, 2018
* 'master' of https://github.com/w3c/webappsec-csp: (38 commits)
  Added more notes about nonce attacks (w3c#356)
  Inherit source browsing context's CSP instead of parent/opener (w3c#358)
  Added a note about fetch redirects being covered (w3c#359)
  Changed names of some SPV event members (w3c#353)
  Added extra note in 'strict-dynamic' (w3c#357)
  Added note for 'strict-dynamic' to alert of avenues of attack(w3c#357)
  Fixed various bikeshed linking warnings and removed embedded from makefile (w3c#355)
  Added repo-type
  Move CSPEE to its own repository: w3c/webappsec-cspee.
  Updated published WD.
  Fixed navigation checks running on URL instead of current URL (w3c#347)
  Directive names should be lowercased (basically case-insensitive) (w3c#346)
  Fixed text for form-action pre-navigate description (w3c#345)
  Added note explaining difference between SRI and CSP hashes (w3c#344)
  Fixing whitespace issues and 2 comments in the area (w3c#340)
  Convert string to UTF-8 before applying hash algorithms (w3c#342)
  Using the correct directive name when reporting violations (w3c#337)
  Admin stuff (w3c#341)
  Code of Conduct
  Added [Exposed] to the SecurityPolicyViolationEvent interface (w3c#338)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant