{"action":"created","issue":{"url":"https://api.github.com/repos/w3c/webappsec/issues/436","labels_url":"https://api.github.com/repos/w3c/webappsec/issues/436/labels{/name}","comments_url":"https://api.github.com/repos/w3c/webappsec/issues/436/comments","events_url":"https://api.github.com/repos/w3c/webappsec/issues/436/events","html_url":"https://github.com/w3c/webappsec/issues/436","id":96910911,"number":436,"title":"Allow public-key signatures in CSP allowed script sources","user":{"login":"ekobrin","id":7738689,"avatar_url":"https://avatars.githubusercontent.com/u/7738689?v=3","gravatar_id":"","url":"https://api.github.com/users/ekobrin","html_url":"https://github.com/ekobrin","followers_url":"https://api.github.com/users/ekobrin/followers","following_url":"https://api.github.com/users/ekobrin/following{/other_user}","gists_url":"https://api.github.com/users/ekobrin/gists{/gist_id}","starred_url":"https://api.github.com/users/ekobrin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ekobrin/subscriptions","organizations_url":"https://api.github.com/users/ekobrin/orgs","repos_url":"https://api.github.com/users/ekobrin/repos","events_url":"https://api.github.com/users/ekobrin/events{/privacy}","received_events_url":"https://api.github.com/users/ekobrin/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/w3c/webappsec/labels/CSP","name":"CSP","color":"207de5"},{"url":"https://api.github.com/repos/w3c/webappsec/labels/SRI","name":"SRI","color":"fbca04"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/w3c/webappsec/milestones/1","html_url":"https://github.com/w3c/webappsec/milestones/CSP%203","labels_url":"https://api.github.com/repos/w3c/webappsec/milestones/1/labels","id":687744,"number":1,"title":"CSP 3","description":"","creator":{"login":"mikewest","id":1497,"avatar_url":"https://avatars.githubusercontent.com/u/1497?v=3","gravatar_id":"","url":"https://api.github.com/users/mikewest","html_url":"https://github.com/mikewest","followers_url":"https://api.github.com/users/mikewest/followers","following_url":"https://api.github.com/users/mikewest/following{/other_user}","gists_url":"https://api.github.com/users/mikewest/gists{/gist_id}","starred_url":"https://api.github.com/users/mikewest/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mikewest/subscriptions","organizations_url":"https://api.github.com/users/mikewest/orgs","repos_url":"https://api.github.com/users/mikewest/repos","events_url":"https://api.github.com/users/mikewest/events{/privacy}","received_events_url":"https://api.github.com/users/mikewest/received_events","type":"User","site_admin":false},"open_issues":26,"closed_issues":2,"state":"open","created_at":"2014-06-11T07:23:42Z","updated_at":"2015-08-12T09:15:28Z","due_on":null,"closed_at":null},"comments":2,"created_at":"2015-07-23T21:37:57Z","updated_at":"2015-08-12T16:01:47Z","closed_at":null,"body":"Rather than requiring a hash to be added to script-src for each script to be checked, can we add support for [ed25519](http://ed25519.cr.yp.to/) public-key signatures? This way a public key could appear in script-src and a signature could accompany each script tag. This reduces the complexity of dynamically assembling pages and reduces the size of the script-src element."},"comment":{"url":"https://api.github.com/repos/w3c/webappsec/issues/comments/130355718","html_url":"https://github.com/w3c/webappsec/issues/436#issuecomment-130355718","issue_url":"https://api.github.com/repos/w3c/webappsec/issues/436","id":130355718,"user":{"login":"fmarier","id":167821,"avatar_url":"https://avatars.githubusercontent.com/u/167821?v=3","gravatar_id":"","url":"https://api.github.com/users/fmarier","html_url":"https://github.com/fmarier","followers_url":"https://api.github.com/users/fmarier/followers","following_url":"https://api.github.com/users/fmarier/following{/other_user}","gists_url":"https://api.github.com/users/fmarier/gists{/gist_id}","starred_url":"https://api.github.com/users/fmarier/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fmarier/subscriptions","organizations_url":"https://api.github.com/users/fmarier/orgs","repos_url":"https://api.github.com/users/fmarier/repos","events_url":"https://api.github.com/users/fmarier/events{/privacy}","received_events_url":"https://api.github.com/users/fmarier/received_events","type":"User","site_admin":false},"created_at":"2015-08-12T16:01:47Z","updated_at":"2015-08-12T16:01:47Z","body":"Also see #449 for SRI."}}