Content Security Policy
CSP 3 is being specified in index.src.html (published at https://www.w3.org/TR/CSP3/)
CSP 2 is published as a CR at http://w3c.org/TR/CSP2.
CSP 1 is published as a Note at http://www.w3.org/TR/2012/CR-CSP-20121115/
WebAppSec Content Security Policy
CSP 3 is being specified in index.src.html (published at https://www.w3.org/TR/CSP3/)
CSP 2 is published as a CR at http://w3c.org/TR/CSP2.
CSP 1 is published as a Note at http://www.w3.org/TR/2012/CR-CSP-20121115/
WebAppSec Content Security Policy
https://w3c.github.io/webappsec-csp/
Other