Some pieces of CSP 1.1 seem "stable" enough to move out from behind the CSP_NEXT flag (though they should remain prefixed).
I'd like to deflag `form-action`, `plugin-types`, and `script-nonce`. The DOM API seems like it needs enough work that it might not make sense to expose it to the stable channel as-is. Would prefixing be enough, or is is too early? I'm still trying to get a feel for how baked things need to be before we expose them to users, so I'd appreciate your input Adam (and Peter, who sparked this bug in the first place).
Er. Actually CCing Peter and Adam. :)
(This bug, of course, assumes that the 1.1 spec goes to FPWD)
That might make sense. I don't think we need to be in a big rush though.
(In reply to comment #3)
> That might make sense. I don't think we need to be in a big rush though.
You're right. There's no hard milestone I think we need to hit, so there's no pressure to get these in front of folks. But if they're non-controversial, I'd like to start getting feedback (and bug reports!) from a broader community sooner rather than later.
I was crazy for filing this. Seriously, crazy early. RESOLVED LATER.