I updated my web security proposal with a fairly large set of changes. I removed Cross Site Request Forgery from the scope of the proposal and instead will focus on the implementation of the Origin header. The syntax has also been expanded to allow policy creation for a larger set of content types, e.g. not just JavaScript.
He was last seen in the north country, hunting. His grave is unmarked, but it does not matter. He had always lived in the borderland, anyway. Somewhere between this world and the other. It was a good death.
Content Security Policy (was Site Security Policy)
Leave a Reply
Create and Share Trail Maps
Find and create routes for running, hiking, and biking in your local area.