Script-Src-Elem missing from CSP directives

codeigniter4 / CodeIgniter4

Open Source PHP Framework (originally from EllisLab)

https://codeigniter.com/

MIT License

5.28k stars 1.88k forks source link

Script-Src-Elem missing from CSP directives #8284

Open crustamet opened 8 months ago

crustamet commented 8 months ago

Hello i was looking into this CSP feature more and more and i found out that codeigniter does not have this option inside the CSP file & config, can we get this into the master also please ?

https://github.com/codeigniter4/CodeIgniter4/blob/develop/system/HTTP/ContentSecurityPolicy.php#L701

just missing style-src-elem and in the App/config/CSP

kenjis commented 8 months ago

CSP3 directives are not implemented in CI4. Ref https://forum.codeigniter.com/showthread.php?tid=88753