{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":43490815,"defaultBranch":"main","name":"webappsec-csp","ownerLogin":"w3c","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2015-10-01T10:33:26.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/379216?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1713945985.0","currentOid":""},"activityList":{"items":[{"before":"b52a539178a8209f0c1e0252a0ff228b28f4c3a4","after":"ae11cdcc369178ab5e2a4f2490bd9f7fabedb9df","ref":"refs/heads/gh-pages","pushedAt":"2024-06-18T15:39:18.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Fix .pr-preview.json (#668)\n\nSHA: d7682183954fe557a61c43f248aa4deed3aacf22\nReason: push, by antosart\n\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Fix .pr-preview.json (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2359785263\" data-permission-text=\"Title is private\" data-url=\"https://github.com/w3c/webappsec-csp/issues/668\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/w3c/webappsec-csp/pull/668/hovercard\" href=\"https://github.com/w3c/webappsec-csp/pull/668\">#668</a>)"}},{"before":"15443fe246405b7844032add2de5da030ff07d09","after":"d7682183954fe557a61c43f248aa4deed3aacf22","ref":"refs/heads/main","pushedAt":"2024-06-18T15:38:05.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"antosart","name":"Antonio Sartori","path":"/antosart","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3632086?s=80&v=4"},"commit":{"message":"Fix .pr-preview.json (#668)\n\nUpdate the src_file to index.bs","shortMessageHtmlLink":"Fix .pr-preview.json (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2359785263\" data-permission-text=\"Title is private\" data-url=\"https://github.com/w3c/webappsec-csp/issues/668\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/w3c/webappsec-csp/pull/668/hovercard\" href=\"https://github.com/w3c/webappsec-csp/pull/668\">#668</a>)"}},{"before":"98b92536c6029afa920180aa0d84a8dfd308824d","after":"b52a539178a8209f0c1e0252a0ff228b28f4c3a4","ref":"refs/heads/gh-pages","pushedAt":"2024-06-13T10:52:37.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Update EnsureCSPDoesNotBlockStringCompilation to match updated HostEnsureCanCompileStrings definition\n\nSHA: 15443fe246405b7844032add2de5da030ff07d09\nReason: push, by annevk\n\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Update EnsureCSPDoesNotBlockStringCompilation to match updated HostEn…"}},{"before":"8fe5fe84e585a2dee2b77d6250bb32742e4de31c","after":"15443fe246405b7844032add2de5da030ff07d09","ref":"refs/heads/main","pushedAt":"2024-06-13T10:51:08.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"annevk","name":"Anne van Kesteren","path":"/annevk","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1544111?s=80&v=4"},"commit":{"message":"Update EnsureCSPDoesNotBlockStringCompilation to match updated HostEnsureCanCompileStrings definition","shortMessageHtmlLink":"Update EnsureCSPDoesNotBlockStringCompilation to match updated HostEn…"}},{"before":"106f4fb9987382cc62679504ab747195eb34a011","after":null,"ref":"refs/heads/mikewest-patch-1","pushedAt":"2024-04-24T08:06:25.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"mikewest","name":"Mike West","path":"/mikewest","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1497?s=80&v=4"}},{"before":"27ff809c08c77698aff57dd23dfc4874c457bff7","after":"98b92536c6029afa920180aa0d84a8dfd308824d","ref":"refs/heads/gh-pages","pushedAt":"2024-04-24T07:20:41.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Correctly match `*` as a `host-part`. (#657)\n\nSHA: 8fe5fe84e585a2dee2b77d6250bb32742e4de31c\nReason: push, by mikewest\n\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Correctly match <code>*</code> as a <code>host-part</code>. (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2255672456\" data-permission-text=\"Title is private\" data-url=\"https://github.com/w3c/webappsec-csp/issues/657\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/w3c/webappsec-csp/pull/657/hovercard\" href=\"https://github.com/w3c/webappsec-csp/pull/657\">#657</a>)"}},{"before":"d091bce6fc43f33dcd4ad08cf7bc34069142abfa","after":"8fe5fe84e585a2dee2b77d6250bb32742e4de31c","ref":"refs/heads/main","pushedAt":"2024-04-24T07:19:44.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"mikewest","name":"Mike West","path":"/mikewest","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1497?s=80&v=4"},"commit":{"message":"Correctly match `*` as a `host-part`. (#657)\n\nThis PR adds support for `*` to the `host-part` matching\r\nalgorithm, allowing patterns like `https://*:123` to correctly\r\nmatch any host.","shortMessageHtmlLink":"Correctly match <code>*</code> as a <code>host-part</code>. (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2255672456\" data-permission-text=\"Title is private\" data-url=\"https://github.com/w3c/webappsec-csp/issues/657\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/w3c/webappsec-csp/pull/657/hovercard\" href=\"https://github.com/w3c/webappsec-csp/pull/657\">#657</a>)"}},{"before":"0108e29ffff9bb89f942903543d4b6712ca3a4b1","after":"106f4fb9987382cc62679504ab747195eb34a011","ref":"refs/heads/mikewest-patch-1","pushedAt":"2024-04-22T06:16:30.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"mikewest","name":"Mike West","path":"/mikewest","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1497?s=80&v=4"},"commit":{"message":"fixup typo","shortMessageHtmlLink":"fixup typo"}},{"before":null,"after":"0108e29ffff9bb89f942903543d4b6712ca3a4b1","ref":"refs/heads/mikewest-patch-1","pushedAt":"2024-04-22T06:15:08.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"mikewest","name":"Mike West","path":"/mikewest","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1497?s=80&v=4"},"commit":{"message":"Correctly match `*` as a `host-part`.\n\nThis PR adds support for `*` to the `host-part` matching\r\nalgorithm, allowing patterns like `https://*:123` to correctly\r\nmatch any host.","shortMessageHtmlLink":"Correctly match <code>*</code> as a <code>host-part</code>."}},{"before":"ed7fe0a4f7bc80f768922c49e5f6c4481224b764","after":"27ff809c08c77698aff57dd23dfc4874c457bff7","ref":"refs/heads/gh-pages","pushedAt":"2024-04-12T09:04:38.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Add notes about non-normativity. (#655)\n\nSHA: d091bce6fc43f33dcd4ad08cf7bc34069142abfa\nReason: push, by mikewest\n\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Add notes about non-normativity. (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2239469486\" data-permission-text=\"Title is private\" data-url=\"https://github.com/w3c/webappsec-csp/issues/655\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/w3c/webappsec-csp/pull/655/hovercard\" href=\"https://github.com/w3c/webappsec-csp/pull/655\">#655</a>)"}},{"before":"1f718b02a511a5dfbb6aa9d801f7963de3e876a3","after":null,"ref":"refs/heads/mikewest-patch-1","pushedAt":"2024-04-12T09:03:29.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"mikewest","name":"Mike West","path":"/mikewest","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1497?s=80&v=4"}},{"before":"f17c7b4bb5bba44802c4c66098b64aac9fee0703","after":"d091bce6fc43f33dcd4ad08cf7bc34069142abfa","ref":"refs/heads/main","pushedAt":"2024-04-12T09:03:25.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"mikewest","name":"Mike West","path":"/mikewest","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1497?s=80&v=4"},"commit":{"message":"Add notes about non-normativity. (#655)\n\nSeveral \"authoring considerations\" sections should have been marked non-normative,\r\nas noted in w3c/webappsec-csp#653. This PR addresses that oversight.","shortMessageHtmlLink":"Add notes about non-normativity. (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2239469486\" data-permission-text=\"Title is private\" data-url=\"https://github.com/w3c/webappsec-csp/issues/655\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/w3c/webappsec-csp/pull/655/hovercard\" href=\"https://github.com/w3c/webappsec-csp/pull/655\">#655</a>)"}},{"before":"e8fb689c2437e884b9987aa70cdf21901bd49d04","after":"ed7fe0a4f7bc80f768922c49e5f6c4481224b764","ref":"refs/heads/gh-pages","pushedAt":"2024-04-12T09:03:19.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Fix script post-request check for scripts allowed by hashes (#654)\n\nSHA: f17c7b4bb5bba44802c4c66098b64aac9fee0703\nReason: push, by antosart\n\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Fix script post-request check for scripts allowed by hashes (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2239257828\" data-permission-text=\"Title is private\" data-url=\"https://github.com/w3c/webappsec-csp/issues/654\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/w3c/webappsec-csp/pull/654/hovercard\" href=\"https://github.com/w3c/webappsec-csp/pull/654\">#654</a>)"}},{"before":"ce3752ad320f3ca4ae92952a1ab963ffb851519a","after":"f17c7b4bb5bba44802c4c66098b64aac9fee0703","ref":"refs/heads/main","pushedAt":"2024-04-12T09:01:35.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"antosart","name":"Antonio Sartori","path":"/antosart","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3632086?s=80&v=4"},"commit":{"message":"Fix script post-request check for scripts allowed by hashes (#654)","shortMessageHtmlLink":"Fix script post-request check for scripts allowed by hashes (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2239257828\" data-permission-text=\"Title is private\" data-url=\"https://github.com/w3c/webappsec-csp/issues/654\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/w3c/webappsec-csp/pull/654/hovercard\" href=\"https://github.com/w3c/webappsec-csp/pull/654\">#654</a>)"}},{"before":null,"after":"1f718b02a511a5dfbb6aa9d801f7963de3e876a3","ref":"refs/heads/mikewest-patch-1","pushedAt":"2024-04-12T09:00:05.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"mikewest","name":"Mike West","path":"/mikewest","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1497?s=80&v=4"},"commit":{"message":"Add notes about non-normativity.\n\nSeveral \"authoring considerations\" sections should have been\r\nmarked as non-normative. This PR does so.","shortMessageHtmlLink":"Add notes about non-normativity."}},{"before":"7839638e1900cff1fbb4b89c7290afec0166bf18","after":"ce3752ad320f3ca4ae92952a1ab963ffb851519a","ref":"refs/heads/main","pushedAt":"2024-02-22T08:42:22.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"antosart","name":"Antonio Sartori","path":"/antosart","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3632086?s=80&v=4"},"commit":{"message":"Fix reference link for [TIMING] (#646)","shortMessageHtmlLink":"Fix reference link for [TIMING] (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2148515285\" data-permission-text=\"Title is private\" data-url=\"https://github.com/w3c/webappsec-csp/issues/646\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/w3c/webappsec-csp/pull/646/hovercard\" href=\"https://github.com/w3c/webappsec-csp/pull/646\">#646</a>)"}},{"before":"fa5f5f94ade12c90a77c82623e36c25b4445e698","after":"e8fb689c2437e884b9987aa70cdf21901bd49d04","ref":"refs/heads/gh-pages","pushedAt":"2024-02-21T10:42:32.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Make all attributes for SecurityPolicyViolationEventInit dict optional (#645)\n\nSHA: 7839638e1900cff1fbb4b89c7290afec0166bf18\nReason: push, by antosart\n\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Make all attributes for SecurityPolicyViolationEventInit dict optional ("}},{"before":"d0de015d8d2c30dfd37658fcc664ebd0a17eaec7","after":"7839638e1900cff1fbb4b89c7290afec0166bf18","ref":"refs/heads/main","pushedAt":"2024-02-21T10:41:08.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"antosart","name":"Antonio Sartori","path":"/antosart","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3632086?s=80&v=4"},"commit":{"message":"Make all attributes for SecurityPolicyViolationEventInit dict optional (#645)\n\nThe dictionary SecurityPolicyViolationEventInit is optional in the constructor of SecurityPolicyViolationEvent. This change removes the required attributes from the properties of this dictionary and adds default values to them.","shortMessageHtmlLink":"Make all attributes for SecurityPolicyViolationEventInit dict optional ("}},{"before":"cc9a860e87bf850441abf0dce31b3298604fcbac","after":"fa5f5f94ade12c90a77c82623e36c25b4445e698","ref":"refs/heads/gh-pages","pushedAt":"2024-01-23T14:08:09.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Add optional trailing dot to host-part (#639)\n\nSHA: d0de015d8d2c30dfd37658fcc664ebd0a17eaec7\nReason: push, by antosart\n\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Add optional trailing dot to host-part (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2096008189\" data-permission-text=\"Title is private\" data-url=\"https://github.com/w3c/webappsec-csp/issues/639\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/w3c/webappsec-csp/pull/639/hovercard\" href=\"https://github.com/w3c/webappsec-csp/pull/639\">#639</a>)"}},{"before":"459f8862f116cf7475598235812d4acf854a41e2","after":"d0de015d8d2c30dfd37658fcc664ebd0a17eaec7","ref":"refs/heads/main","pushedAt":"2024-01-23T14:06:46.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"antosart","name":"Antonio Sartori","path":"/antosart","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3632086?s=80&v=4"},"commit":{"message":"Add optional trailing dot to host-part (#639)\n\nA valid host can have a trailing dot, however this is not allowed by the current host-part ABNF. This change adds an optional dot at the end of host-part.\r\n\r\nCo-authored-by: Saeid Eid <saeideid@chromium.org>","shortMessageHtmlLink":"Add optional trailing dot to host-part (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2096008189\" data-permission-text=\"Title is private\" data-url=\"https://github.com/w3c/webappsec-csp/issues/639\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/w3c/webappsec-csp/pull/639/hovercard\" href=\"https://github.com/w3c/webappsec-csp/pull/639\">#639</a>)"}},{"before":"acf957e812c40ab574a174954759e293f047f022","after":"cc9a860e87bf850441abf0dce31b3298604fcbac","ref":"refs/heads/gh-pages","pushedAt":"2024-01-15T11:39:10.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Is-element-nonceable should check if the attribute's name |contains| <script/<style> (#636)\n\nSHA: 459f8862f116cf7475598235812d4acf854a41e2\nReason: push, by mozfreddyb\n\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Is-element-nonceable should check if the attribute's name |contains| …"}},{"before":"aba284c2895ee1084ecfbcde72cecab18b34c0e3","after":"459f8862f116cf7475598235812d4acf854a41e2","ref":"refs/heads/main","pushedAt":"2024-01-15T11:37:36.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"mozfreddyb","name":"Frederik Braun","path":"/mozfreddyb","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5418775?s=80&v=4"},"commit":{"message":"Is-element-nonceable should check if the attribute's name |contains| <script/<style> (#636)","shortMessageHtmlLink":"Is-element-nonceable should check if the attribute's name |contains| …"}},{"before":"e8e51ed520d768e877ee198ab795af9124fc5930","after":"acf957e812c40ab574a174954759e293f047f022","ref":"refs/heads/gh-pages","pushedAt":"2023-12-06T12:49:05.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Replace links to discontinued RFC7231 with RFC9110 (#630)\n\nSHA: aba284c2895ee1084ecfbcde72cecab18b34c0e3\nReason: push, by antosart\n\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Replace links to discontinued RFC7231 with RFC9110 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2028453910\" data-permission-text=\"Title is private\" data-url=\"https://github.com/w3c/webappsec-csp/issues/630\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/w3c/webappsec-csp/pull/630/hovercard\" href=\"https://github.com/w3c/webappsec-csp/pull/630\">#630</a>)"}},{"before":"9769609e513b5cab04ae55c957efec086f4fed5c","after":"aba284c2895ee1084ecfbcde72cecab18b34c0e3","ref":"refs/heads/main","pushedAt":"2023-12-06T12:47:58.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"antosart","name":"Antonio Sartori","path":"/antosart","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3632086?s=80&v=4"},"commit":{"message":"Replace links to discontinued RFC7231 with RFC9110 (#630)","shortMessageHtmlLink":"Replace links to discontinued RFC7231 with RFC9110 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2028453910\" data-permission-text=\"Title is private\" data-url=\"https://github.com/w3c/webappsec-csp/issues/630\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/w3c/webappsec-csp/pull/630/hovercard\" href=\"https://github.com/w3c/webappsec-csp/pull/630\">#630</a>)"}},{"before":"f7d79d6f57dc4b2bb84188ab4a0f7fbd23cec31c","after":"e8e51ed520d768e877ee198ab795af9124fc5930","ref":"refs/heads/gh-pages","pushedAt":"2023-10-30T06:43:05.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Add `\"json\"` destination for `\"connect-src\"` (#611)\n\nSHA: 9769609e513b5cab04ae55c957efec086f4fed5c\nReason: push, by antosart\n\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Add <code>\"json\"</code> destination for <code>\"connect-src\"</code> (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1820415613\" data-permission-text=\"Title is private\" data-url=\"https://github.com/w3c/webappsec-csp/issues/611\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/w3c/webappsec-csp/pull/611/hovercard\" href=\"https://github.com/w3c/webappsec-csp/pull/611\">#611</a>)"}},{"before":"b05cfac6c286e33c3c275dc652083db1eda8667c","after":"9769609e513b5cab04ae55c957efec086f4fed5c","ref":"refs/heads/main","pushedAt":"2023-10-30T06:41:07.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"antosart","name":"Antonio Sartori","path":"/antosart","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3632086?s=80&v=4"},"commit":{"message":"Add `\"json\"` destination for `\"connect-src\"` (#611)\n\nThis change explicitly adds the \"json\" fetch destination to the algorithm deciding which directive must be checked, and it makes \"connect-src\" responsible for the check.","shortMessageHtmlLink":"Add <code>\"json\"</code> destination for <code>\"connect-src\"</code> (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1820415613\" data-permission-text=\"Title is private\" data-url=\"https://github.com/w3c/webappsec-csp/issues/611\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/w3c/webappsec-csp/pull/611/hovercard\" href=\"https://github.com/w3c/webappsec-csp/pull/611\">#611</a>)"}},{"before":"5260c891244bb6daa23c436943758f38f04f9499","after":"f7d79d6f57dc4b2bb84188ab4a0f7fbd23cec31c","ref":"refs/heads/gh-pages","pushedAt":"2023-09-20T07:53:16.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Remove RECOMMENDATION to not send multiple CSP headers (#622)\n\nSHA: b05cfac6c286e33c3c275dc652083db1eda8667c\nReason: push, by mikewest\n\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Remove RECOMMENDATION to not send multiple CSP headers (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1902641763\" data-permission-text=\"Title is private\" data-url=\"https://github.com/w3c/webappsec-csp/issues/622\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/w3c/webappsec-csp/pull/622/hovercard\" href=\"https://github.com/w3c/webappsec-csp/pull/622\">#622</a>)"}},{"before":"66216b445cb9e5fe5701ea234cd75af719bf4e34","after":"b05cfac6c286e33c3c275dc652083db1eda8667c","ref":"refs/heads/main","pushedAt":"2023-09-20T07:51:38.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"mikewest","name":"Mike West","path":"/mikewest","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1497?s=80&v=4"},"commit":{"message":"Remove RECOMMENDATION to not send multiple CSP headers (#622)","shortMessageHtmlLink":"Remove RECOMMENDATION to not send multiple CSP headers (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1902641763\" data-permission-text=\"Title is private\" data-url=\"https://github.com/w3c/webappsec-csp/issues/622\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/w3c/webappsec-csp/pull/622/hovercard\" href=\"https://github.com/w3c/webappsec-csp/pull/622\">#622</a>)"}},{"before":"962c84aebdf238107e136d623e55a8f8263e6fce","after":"5260c891244bb6daa23c436943758f38f04f9499","ref":"refs/heads/gh-pages","pushedAt":"2023-09-04T08:35:41.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"[editorial] Add missing semicolons in example CSP (#619)\n\nSHA: 66216b445cb9e5fe5701ea234cd75af719bf4e34\nReason: push, by antosart\n\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>","shortMessageHtmlLink":"[editorial] Add missing semicolons in example CSP (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1879779915\" data-permission-text=\"Title is private\" data-url=\"https://github.com/w3c/webappsec-csp/issues/619\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/w3c/webappsec-csp/pull/619/hovercard\" href=\"https://github.com/w3c/webappsec-csp/pull/619\">#619</a>)"}},{"before":"65416b8553228a5d22b17048e7941afbebf4dd79","after":"66216b445cb9e5fe5701ea234cd75af719bf4e34","ref":"refs/heads/main","pushedAt":"2023-09-04T08:33:52.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"antosart","name":"Antonio Sartori","path":"/antosart","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3632086?s=80&v=4"},"commit":{"message":"[editorial] Add missing semicolons in example CSP (#619)","shortMessageHtmlLink":"[editorial] Add missing semicolons in example CSP (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1879779915\" data-permission-text=\"Title is private\" data-url=\"https://github.com/w3c/webappsec-csp/issues/619\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/w3c/webappsec-csp/pull/619/hovercard\" href=\"https://github.com/w3c/webappsec-csp/pull/619\">#619</a>)"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEaKQJzQA","startCursor":null,"endCursor":null}},"title":"Activity · w3c/webappsec-csp"}