Restrict Directives to Valid Combinations - Githubissues

GeekInTheNorth / Stott.Security.Optimizely

A CMS Administration interface for managing security headers for Optimizely CMS Traditional and Hybrid builds.

MIT License

4 stars 1 forks source link

Restrict Directives to Valid Combinations #253

Open GeekInTheNorth opened 2 weeks ago

GeekInTheNorth commented 2 weeks ago

Only show valid directives for specialised sources:

'unsafe-eval'
- script-src
- script-src-elem
- script-src-attr
- worker-src
'wasm-unsafe-eval'
- script-src
- script-src-elem
- script-src-attr
- worker-src
'unsafe-hashes'
- script-src
- script-src-elem
'unsafe-inline'
- script-src
- script-src-elem
- script-src-attr
- style-src
- style-src-elem
- style-src-attr
'inline-speculation-rules'
- script-src
- script-src-elem

Validation should also prevent invalid directives for specialised sources.