103390 2012-11-27 04:08:20 -0800 CSP 1.1: Decide when to move some directives out from behind CSP_NEXT. 2013-02-08 04:52:49 -0800 1 1 1 Unclassified WebKit WebCore Misc. 528+ (Nightly build) Unspecified Unspecified RESOLVED LATER P2 Normal --- 85558 1 mkwst mkwst abarth peter oldest_to_newest 776598 0 mkwst 2012-11-27 04:08:20 -0800 Some pieces of CSP 1.1 seem "stable" enough to move out from behind the CSP_NEXT flag (though they should remain prefixed). I'd like to deflag `form-action`, `plugin-types`, and `script-nonce`. The DOM API seems like it needs enough work that it might not make sense to expose it to the stable channel as-is. Would prefixing be enough, or is is too early? I'm still trying to get a feel for how baked things need to be before we expose them to users, so I'd appreciate your input Adam (and Peter, who sparked this bug in the first place). 776599 1 mkwst 2012-11-27 04:08:49 -0800 Er. Actually CCing Peter and Adam. :) 776642 2 mkwst 2012-11-27 05:04:56 -0800 (This bug, of course, assumes that the 1.1 spec goes to FPWD) 776860 3 abarth 2012-11-27 09:30:06 -0800 That might make sense. I don't think we need to be in a big rush though. 776913 4 mkwst 2012-11-27 10:03:07 -0800 (In reply to comment #3) > That might make sense. I don't think we need to be in a big rush though. You're right. There's no hard milestone I think we need to hit, so there's no pressure to get these in front of folks. But if they're non-controversial, I'd like to start getting feedback (and bug reports!) from a broader community sooner rather than later. 828444 5 mkwst 2013-02-08 04:52:49 -0800 I was crazy for filing this. Seriously, crazy early. RESOLVED LATER.