Uniform builtin plugins exemption structures to allow for allowlisting of packages.

google / go-safeweb

Secure-by-default HTTP servers in Go.

Apache License 2.0

853 stars 67 forks source link

Uniform builtin plugins exemption structures to allow for allowlisting of packages. #336

Open empijei opened 2 years ago

empijei commented 2 years ago

All builtin plugin packages should have exemptions in separate ones to ease bancheck or similar tools integrations.

I did this in #341 for csp, fetchmetadata and framing by creating the internalunsafe versions of the various configs and exhemptions, but we need to do it for the remaining ones.