gravity-ui / expresskit

MIT License
4 stars 2 forks source link

CSP support #9

Closed resure closed 8 months ago

resure commented 1 year ago

Currently, in our private core framework, we use internal CSP package which wraps express-csp-header adding some common-used internal csp rules.

We should implement CSP support in ExpressKit using express-csp-header, and:

  1. Check if there is any additional differences between express-csp-header and our internal package that we should implement here (except for included default rules)
  2. Understand how can we continue define/extend ExpressKit CSP rules using that internal package in our apps