w3c/webappsec — pull request #10 by hillbrad (2014-03-11 21:04:57+00:00)
Title: Added language about GUID URI schemes.

Mike and Dan,

I believe this text reflects the current consensus that GUID URI schemes should never match a * policy and must be explicitly listed, with warning text but not normative equivalence to unsafe-inline and unsafe-eval.