Content Security Policy

• Editor's draft: https://w3c.github.io/webappsec/specs/content-security-policy/
  • Source: https://github.com/w3c/webappsec/tree/master/specs/content-security-policy/
• Level 1, Note: http://w3.org/TR/CSP
• Level 2, Candidate Recommendation: http://w3.org/TR/CSP2

Credential Management:

• Editor's draft: https://w3c.github.io/webappsec/specs/credentialmanagement/
  • Source: https://github.com/w3c/webappsec/tree/master/specs/credentialmanagement/
• Use Cases: https://w3c.github.io/webappsec/usecases/credentialmanagement/

Entry Point Regulation:

• Editor's draft: https://w3c.github.io/webappsec/specs/epr/
  • Source: https://github.com/w3c/webappsec/tree/master/specs/epr/

Mixed Content:

• Editor's Draft: https://w3c.github.io/webappsec/specs/mixedcontent/
  • Source: https://github.com/w3c/webappsec/tree/master/specs/mixedcontent
• Candidate Recommendation: http://www.w3.org/TR/mixed-content/

Privileged Contexts

• Editor's Draft: https://w3c.github.io/webappsec/specs/powerfulfeatures/
  • Source: https://github.com/w3c/webappsec/blob/master/specs/powerfulfeatures
• Working Draft: http://www.w3.org/TR/powerful-features/

Referrer Policy

• Editor's Draft: https://w3c.github.io/webappsec/specs/referrer-policy/
  • Source: https://github.com/w3c/webappsec/tree/master/specs/referrer-policy
• Working Draft: http://w3.org/TR/referrer-policy

Subresource Integrity

• Editor's Draft: https://w3c.github.io/webappsec/specs/subresourceintegrity/
  • Source: https://github.com/w3c/webappsec/tree/master/specs/subresourceintegrity
• Working Draft: http://w3.org/TR/SRI

Upgrade Insecure Requests

• Editor's Draft: https://w3c.github.io/webappsec/specs/upgrade/
  • Source: https://github.com/w3c/webappsec/blob/master/specs/upgrade
• Working Draft: http://www.w3.org/TR/upgrade-insecure-requests/