This is an archived snapshot of W3C's public bugzilla bug tracker, decommissioned in April 2019. Please see the home page for more details.
The CSP spec is here: http://dvcs.w3.org/hg/content-security-policy/raw-file/tip/csp-specification.dev.html#sandbox I need to update the HTML spec so that any browsing context can have the flags set for the lifetime of a specific Document in that browsing context.