Details on Product CSP Level 3

Open, Raised and Pending Review Issues

New issues for this product are notified to public-webappsec@w3.org (change it).

There are 11 open and raised issues listed in the system.

ID	State	Title	Raised on	Product	Open Actions
ISSUE-34	OPEN	Discuss use cases / risks of script access to CSP information, solicit specific public comment on this feature with FPWD	2012-11-02	CSP Level 3	0
ISSUE-57	OPEN	Do we want to control popups, if so, how?	2014-02-10	CSP Level 3	0
ISSUE-64	OPEN	Csp3 how to deal with large policies needed by single-page webapps (http://lists.w3.org/archives/public/public-webappsec/2014aug/0021.html)	2014-08-27	CSP Level 3	0
ISSUE-67	OPEN	WebRTC via 'connect-src'?	2014-09-03	CSP Level 3	0
ISSUE-68 401 prompting by subresources	OPEN	How to manage 401 phishing prompts by subresources	2014-10-27	CSP Level 3	0
ISSUE-66	RAISED	No-external-navigation as potential csp3 feature http://lists.w3.org/archives/public/public-webappsec/2014aug/0053.html	2014-08-27	CSP Level 3	0
ISSUE-69 Overt channel control in CSP	RAISED	Consider directives to manage postMessage and external navigation of iframes	2014-10-28	CSP Level 3	0
ISSUE-70 Using ni:/// as CSP source	RAISED	Investigate using ni:/// as a CSP source expression	2014-11-04	CSP Level 3	0
ISSUE-71 JSONP directives	RAISED	Consider directives in CSP Level 3 to reduce attack surface of legacy JSONP interaces	2014-11-04	CSP Level 3	0
ISSUE-73 CSP path matching	RAISED	Consider allowing relative paths (to 'self') in source productions	2014-12-30	CSP Level 3	0
ISSUE-74 plugin-types 'none'	RAISED	allow explicitly setting the 'none' keyword source for plugin-type directive	2014-12-30	CSP Level 3	0

Open Actions

There are 10 open and pending review actions.

ID	State	Title	Person	Due Date	Associated with
ACTION-141	open	CSP Next: Update default-src language to be more future-proof	Mike West	2015-01-31	CSP Level 3
ACTION-144	open	CSP Next: Propose text on layering of fetch context types with CSP directives	Mike West	2015-01-31	CSP Level 3
ACTION-164	open	CSP Next: Integrate mnot's cookie scope proposal.	Mike West	2015-01-31	CSP Level 3
ACTION-172	open	Review servicewoker issues relevant to csp from github	Mike West	2015-01-31	CSP Level 3
ACTION-182	open	Make sure blob origin is discussed further on list	Brad Hill	2014-11-17	CSP Level 3
ACTION-186	open	Do more research on preventing 401 attach http://lists.w3.org/archives/public/public-webappsec/2014aug/0016.html	Brad Hill	2015-01-31	CSP Level 3
ACTION-188	open	Evaluate json-src	Mike West	2015-01-31	CSP Level 3
ACTION-189	open	Evaluate script-ancestors	Mike West	2015-01-31	CSP Level 3
ACTION-192	open	Evaluate control over nesting depth.	Mike West	2014-11-03	CSP Level 3
ACTION-198	open	Take bookmarklets discussion back to the list	Brad Hill	2014-11-17	CSP Level 3

Add a new action item.

See all issues and actions for this product.