Add a flag to use report only header

Offroadcode / umbraco-content-security-policy

Code that generates a Content-Security-Policy header, but allows front-end developers to easily edit it through a straightforward config file.

4 stars 2 forks source link

Add a flag to use report only header #2

Open dawoe opened 6 years ago

dawoe commented 6 years ago

Sometimes it comes in handy to set your CSP (eg during dev) to report only by using the header : Content-Security-Policy-Report-Only

This won't block the resources, but will report in the console if you have potential issues. This comes in handy when you are adding it to a existing site.

naepalm commented 6 years ago

@dawoe This is great feedback and I can definitely update it to allow a report-only option that can be applied to the XML. Thanks! I'll put it on my list to update it :)