w3c webappsec-post-spectre-webdev issues

w3c / webappsec-post-spectre-webdev

Post-Spectre Web Development

https://w3c.github.io/webappsec-post-spectre-webdev/

Other

17 stars 2 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Replace CORB link with Chromium explainer

#26 fmarier opened 1 year ago
0
Move this to MDN?

#24 samuelweiler opened 3 years ago
2
Cite “A guide to enable cross-origin isolation”

#23 sideshowbarker closed 3 years ago
1
Editorial: Set 'Level: none' in Bikeshed metadata

#22 sideshowbarker closed 3 years ago
1
Editorial: Drop “site-isolation” dupe from biblio

#21 sideshowbarker closed 3 years ago
0
Editorial: Fix a couple of typos/misspellings

#20 sideshowbarker closed 3 years ago
0
Editorial: Make FWPD indicate non-Rec-track

#19 sideshowbarker closed 3 years ago
0
Align repo-type with documented taxonomy

#18 dontcallmedom closed 3 years ago
0
Editorial: Add w3cid for Mike West as editor

#17 sideshowbarker closed 3 years ago
0
Editorial: Prep fpwd.html 2021-03-16 publication

#16 sideshowbarker closed 3 years ago
1
CI: Use GitHub Actions to build/validate/publish

#15 sideshowbarker closed 3 years ago
4
update github.io link

#14 wseltzer closed 3 years ago
1
Editorial: uppercase group

#13 annevk closed 3 years ago
1
Why is Sec-Fetch-User not mentioned?

#12 annevk closed 3 years ago
2
Should static resources use Vary?

#11 annevk closed 3 years ago
1
Clarify the threat model's browser process description.

#10 mikewest closed 3 years ago
1
Maybe add a note about cross-origin isolation

#9 shhnjk closed 3 years ago
2
Is there any benefit on explicitly setting default headers?

#8 shhnjk closed 3 years ago
1
Try asking for requesting CORS for default no-cors subresources?

#7 shhnjk closed 3 years ago
7
What do you mean by this?

#6 shhnjk closed 3 years ago
2
Better wording for process boundary

#5 shhnjk closed 3 years ago
2
Should we have TAO * even for static subresources?

#4 camillelamy opened 3 years ago
1
Clarify the risk coming from embedded iframes

#3 camillelamy closed 3 years ago
1
Make recommendations around local-schemed frames.

#2 mikewest closed 3 years ago
5
Does `Content-Disposition` have useful meaning?

#1 mikewest closed 3 years ago
4