This is an archived snapshot of W3C's public bugzilla bug tracker, decommissioned in April 2019. Please see the home page for more details.

WebAppsSec

Open-access tracking system for the Web Applications Security WG

Select a component to see all bugs reported for that component.

Component Default Assignee Default QA Contact
CORS Anne This bug has no owner yet - up for the taking
http://dvcs.w3.org/hg/cors/raw-file/tip/Overview.html
CSP Adam Barth This bug has no owner yet - up for the taking
https://dvcs.w3.org/hg/content-security-policy/raw-file/tip/csp-1.0-specification.html
CSP2 Mike West
https://w3c.github.io/webappsec/specs/content-security-policy/
CSP3 Mike West
Content Security Policy Level 3
Mixed Content Mike West
https://w3c.github.io/webappsec/specs/mixedcontent/
Referrer Policy Mike West
https://w3c.github.io/webappsec/specs/referrer-policy/
Subresource Integrity Mike West
http://w3c.github.io/webappsec/specs/subresourceintegrity/
UISecurity Brad Hill
https://dvcs.w3.org/hg/user-interface-safety/raw-file/tip/user-interface-safety.html