paragonie / csp-builder

Build Content-Security-Policy headers from a JSON file (or build them programmatically)

https://paragonie.com/projects

paragonie/csp-builder Issues

Calling disableOldBrowserSupport can lead to un-expected regressions with frame-src directives
Updated 6 months ago
`script-src-elem`, `script-src-attr`, `style-src-elem` and `style-src-attr` are not supported
Closed a year ago1
report-uri is encoded in to unuseable string
Closed a year ago3
Integrate or document report-to
Updated a year ago
report-uri gets wrongly encoded
Closed a year ago1
Support for Feature-Policy header?
Closed 2 years ago2
Add support for 'require-trusted-types-for' policy
Updated 2 years ago1
Add support for 'unsafe-hashes' policy
Closed 2 years ago1
Support manifest-src directive
Closed 2 years ago1
Unable to add "blob" value to connect-src in json file
Closed 3 years ago1
Add support for script-src-elem and script-src-attr
Closed 3 years ago
My browser keeps ignoring this.
Closed 3 years ago1
Suggestion: check for duplicate addSource
Closed 3 years ago1
DOCUMENTATION?????????????
Closed 3 years ago9
Save to JSON
Closed 3 years ago1
Add support for 'report-sample' directive
Closed 3 years ago
Ability to set both "report-uri" AND "report-to"
Closed 3 years ago1
Add support for https: scheme
Closed 3 years ago1
Add method for retrieving value set for a directive
Closed 3 years ago1
report-to directive not handled well by Chrome 76
Closed 5 years ago2
report-uri deprecated
Updated 5 years ago3
missing self in readme example
Updated 5 years ago
.htaccess support for headers
Updated 5 years ago
"support older browsers" nonce fix
Updated 5 years ago5
what is the use for "type" policies param ?
Closed 6 years ago2
Add worker-src
Closed 6 years ago1
Add require-sri-for directive.
Closed 6 years ago
How to add strict-dynamic ?
Closed 6 years ago5
Nonce means number used once, random bytes used
Closed 6 years ago7
Allow adding "blob" as source in JSON
Closed 7 years ago3
Invokable Extension
Closed 7 years ago6
Functions and classes starting with a backslash
Closed 7 years ago2
Add data: uris
Closed 7 years ago5
ambiguity: PSR-7 Message
Closed 8 years ago6
PSR-7 support, or else array of headers to be returned
Closed 8 years ago13
Support frame-src for compatibility with WebKit (CSP 1)
Closed 8 years ago2
Add a scheme to whitelisted hosts by default if not specified
Closed 8 years ago4
Content security policy for plugin-types
Closed 8 years ago1
Add X-Content-Security-Policy and X-WebKit-CSP to sendCSPHeader()
Closed 9 years ago1