[Editorial] Avoid nested parenthetical (#804) · w3c/webappsec-csp@8df1f5d - 惯性聚合

推荐订阅源

Forbes - Security

大猫的无限游戏

让小产品的独立变现更简单 - ezindie.com

美团技术团队

博客园 - 聂微东

博客园 - 叶小钗

Security Latest

Threat Intelligence Blog | Flashpoint

博客园_首页

Java Code Geeks

宝玉的分享

Cyber Attacks, Cyber Crime and Cyber Security

Privacy International News Feed

CXSECURITY Database RSS Feed - CXSecurity.com

Threat Research - Cisco Blogs

The Hacker News

LINUX DO - 热门话题

freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More

Darknet – Hacking Tools, Hacker News & Cyber Security

Last Week in AI

人人都是产品经理

酷壳 – CoolShell

Tor Project blog

罗磊的独立博客

Vulnerabilities – Threatpost

Apple Machine Learning Research

钛媒体：引领未来商业与生活新知

有赞技术团队

Hugging Face - Blog

奇客Solidot–传递最新科技情报

The Exploit Database - CXSecurity.com

博客园 - 【当耐特】

Schneier on Security

Secure Thoughts

cs.CL updates on arXiv.org

博客园 - 司徒正美

Recent Commits to webappsec-csp:main

[Editorial] Compare origins with 'same origin', not 'is'. · w3c/webappsec-csp@4e01ae7 Fixing 'policy' local link text. · w3c/webappsec-csp@0051d16 Fixing status. · w3c/webappsec-csp@b1de5f1 Export a dfn. · w3c/webappsec-csp@e156259 [Editorial] 'policy' is a local term, not global. (#812) · w3c/webappsec-csp@3e24aea Add "text" destination type, for JavaScript text imports · w3c/webappsec-csp@7845c09 Attach self-origin to CSP list (#805) · w3c/webappsec-csp@3a5e595 Fix algorithms called with missing parameters (#806) · w3c/webappsec-csp@a20d8fb Add 'unsafe-webtransport-hashes' keyword to connect-src (#791) · w3c/webappsec-csp@1b8a543 Add missing closing tag for section (#800) · w3c/webappsec-csp@5bc6639 [Editorial] Fix broken references to Trusted Types spec (#790) · w3c/webappsec-csp@a131bcb Apply `strict-dynamic` to inline scripts. (#787) · w3c/webappsec-csp@13c7d8e [Editorial] Reference the algorithm instead of the section for parse-… · w3c/webappsec-csp@9dd7cf1 [Editorial] Fix reference to parse-metadata in SRI (#777) · w3c/webappsec-csp@1137e96 Fix path matching in match-url-to-source-expression (#773) · w3c/webappsec-csp@97e4a82 Change CSPViolationReportBody to dictionary (#737) · w3c/webappsec-csp@a441899 Further clarify post-request check (#730) · w3c/webappsec-csp@7690298 Fix URL in report-uri request (#731) · w3c/webappsec-csp@5c12cbb [Editorial] Fix missing input param of match-response-source-list (#732) · w3c/webappsec-csp@7092cef

[Editorial] Avoid nested parenthetical (#804) · w3c/webappsec-csp@8df1f5d

Krinkle · 2026-03-06 · via Recent Commits to webappsec-csp:main

Original file line number	Diff line number	Diff line change
`@@ -659,8 +659,8 @@ spec:SRI; urlPrefix: https://w3c.github.io/webappsec-subresource-integrity`
`659`	`659`
`660`	`660`	4. Hosts such as `example.com` (which matches any resource on
`661`	`661`	the host, regardless of scheme) or `*.example.com` (which
`662`		`- matches any resource on the host's subdomains (and any of`
`663`		`- its subdomains' subdomains, and so on))`
	`662`	`+ matches any resource on the host's subdomains, and any of`
	`663`	`+ its subdomains' subdomains, and so on)`
`664`	`664`
`665`	`665`	5. Nonces such as `'nonce-ch4hvvbHDpv7xCSvXCs3BrNggHdTzxUA'` (which can match
`666`	`666`	`specific elements on a page)`

此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。原文来自 — 版权归原作者所有。