Search results

setting cssText rather than style

Status: Open.

#774 In w3c/webappsec-csp;

· johanneswilm opened on Jul 1, 2025

Making CSP more usable for organizations at scale

Status: Open.

#736 In w3c/webappsec-csp;

· swijckmans opened on Jun 18, 2025

Implementation differences with "Strip URL for use in reports"

Status: Open.

#735 In w3c/webappsec-csp;

· evilpie opened on Jun 13, 2025

Add Back The <code>prefetch-src</code> Directive to The CSP Header

Status: Open.

#733 In w3c/webappsec-csp;

· zphrs opened on Jun 6, 2025

Strict-Dynamic CSP doesn't prevent execution of parser inserted scripts via document.createRange().createContextualFragment

Status: Open.

#708 In w3c/webappsec-csp;

· andreituicu opened on Feb 26, 2025

"source file" lacks a real defintion

clarificationThe standard is unclear or ambiguousThe standard is unclear or ambiguous

interopImplementations are not interoperable with each otherImplementations are not interoperable with each other

Status: Open.

#707 In w3c/webappsec-csp;

· evilpie opened on Feb 14, 2025

connect-src test suite allows multiple non-interopable implementations.

interopImplementations are not interoperable with each otherImplementations are not interoperable with each other

Status: Open.

#706 In w3c/webappsec-csp;

· lukewarlow opened on Jan 30, 2025

Clipping of violation’s sample to the 40 first characters

needs testsMoving the issue forward requires someone to write testsMoving the issue forward requires someone to write tests

Status: Open.

#704 In w3c/webappsec-csp;

· fred-wang opened on Jan 23, 2025

How to specify 2 endpoints for Reporting-Endpoints?

metaTasks and questions outside the content of the standardTasks and questions outside the content of the standard

Status: Open.

#701 In w3c/webappsec-csp;

· SwiftExtender opened on Jan 15, 2025

EnsureCSPDoesNotBlockStringCompilation: calling "Get Trusted Type compliant string"

editorialChanges that do not affect how the standard is understoodChanges that do not affect how the standard is understood

Status: Open.

#698 In w3c/webappsec-csp;

· fred-wang opened on Dec 4, 2024

EnsureCSPDoesNotBlockStringCompilation: Explain why we need to check TrustedScript's data (and add tests)

Status: Open.

#697 In w3c/webappsec-csp;

· fred-wang opened on Dec 4, 2024

https://w3c.github.io/webappsec-csp/#report-violation invokes "Queue a task" without passing a task source

Status: Open.

#696 In w3c/webappsec-csp;

· ghost opened on Dec 2, 2024