issues
search
google
/
csp-evaluator
https://csp-evaluator.withgoogle.com
Apache License 2.0
315
stars
45
forks
source link
Added support for Trusted Types to CSP Evaluator + small bug fixes.
#19
Closed
lweichselbaum
closed
4 years ago
lweichselbaum
commented
4 years ago
Summary:
added support for trusted-types and require-for-trusted-types directives ( resolves #17 )
added syntax checks for trusted-types directives
added recommendation for "require-trusted-types-for 'script'"
added support for 'unsafe-hashes' ( resolves #13 )
added prefetch-src directive ( resolves #12 )
enabled deprecation checks by default ( resolves #15 #16 #18 )
deprecated disown-opener ( resolves #14 )
undeprecated report-uri since it's basically used everywhere.
js fixes/formatting
other small fixes DEMO:
https://csp-evaluator.withgoogle.com
Malvoz
commented
4 years ago
I'm astonished, thanks!
Summary: