search

doyensec / electronegativity

Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.
Apache License 2.0
972 stars 66 forks source link

Check for CSP #27

Closed JarLob closed 5 years ago

JarLob commented 6 years ago

https://electronjs.org/docs/tutorial/security#6-define-a-content-security-policy

ikkisoft commented 5 years ago

We could simply verify whether a CSP policy is set, without having to check the specific directives (e.g. https://csp-evaluator.withgoogle.com/)