juunas11 aspnetcore-security-headers issues

juunas11 / aspnetcore-security-headers

Middleware for adding security headers to an ASP.NET Core application.

MIT License

263 stars 43 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

nonce is generating with + symbol but .net core is encoding it

#79 mohdyasar opened 3 months ago
1
CspFontsBuilder doesn't allow CspFontSrcOptions.AllowDataScheme to be set

#78 paultew opened 3 months ago
0
Using Nonces with Blazor

#77 Clive321A opened 4 months ago
0
Configure CSP in appsettings.json but want to set OnSendingHeader

#76 litera opened 5 months ago
1
The GetNonce method returns an incorrect value during an ajax request

#75 Lukas-26 opened 9 months ago
0
Add support for script-src-elem, script-src-attr, style-src-elem and …

#74 PhenX opened 9 months ago
2
Feature/5.0

#73 juunas11 closed 12 months ago
0
Implemented support for AllowedHashes

#72 gps-lasrol closed 12 months ago
2
Appending nonce to scripts added as strings

#71 jplatfordquba closed 1 year ago
1
Alternative syntax

#70 gatecrasher63 opened 1 year ago
1
Using SHA. How do I use it?

#69 gatecrasher63 opened 1 year ago
4
Nonce is empty

#68 spaasis closed 1 year ago
2
Feature/rename featurepolicy

#67 alexandrejulien closed 11 months ago
2
Renaming header.

#66 alexandrejulien closed 1 year ago
0
Rename header "Feature Policy" to "Permissions-Policy"

#65 alexandrejulien opened 1 year ago
1
add nonce attribute for devextreme components

#64 Thabot011 opened 1 year ago
2
Add Antiforgery Token to report violations post.

#63 malylemire1 opened 1 year ago
1
Path in ReportViolationsTo causes 404 when using IIS

#62 Rakshasas opened 2 years ago
1
Access the nonce value

#61 tlnorwood closed 1 year ago
1
Rename UseHsts to UseStrictTransportSecurity

#60 juunas11 closed 2 years ago
0
Feature/4.0

#59 juunas11 closed 2 years ago
0
feat(CSP): add 'trusted-types' CSP directive support

#58 luber opened 2 years ago
1
Add support of 'require-trusted-types-for' csp directive

#57 luber opened 2 years ago
1
Implemented Sha256Support instead of nonce

#56 conradmicallef opened 2 years ago
1
Added support for CSP report-to

#55 daviddesmet opened 2 years ago
3
Add CspReport Object

#54 Matti-Koopa opened 3 years ago
1
Add support for report-sample

#53 j-hudecek opened 3 years ago
1
<div asp-validation-summary="All" ></div>

#52 V4A001 closed 3 years ago
2
Usage with a single page application

#51 TheKnarf opened 4 years ago
3
change namings of app builder extensions, added Joonasw to method names

#50 phreakmania closed 4 years ago
2
Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive:

#49 vankampenp opened 4 years ago
1
Add report options to UseXXssProtection

#48 jamesharling opened 4 years ago
1
Add a tag helper to automatically put SHA hash into CSP - alternative to nonce

#47 shand-obs opened 4 years ago
2
.NET Core 3.0 Issues

#46 MCFHTAGENTS closed 4 years ago
2
Nonce not working in asp.net core mvc

#45 Ephaltes opened 5 years ago
11
Add .editorconfig

#44 MrMDavidson closed 5 years ago
1
Adds support for "require-sri-for" value

#43 MrMDavidson closed 5 years ago
5
Disable output of "upgrade-insecure-requests" in "report only" mode

#42 mgroetan opened 5 years ago
3
Jpk/report to

#41 jpknoll opened 5 years ago
3
Support new "report-to" directive and header.

#40 jpknoll opened 5 years ago
3
Add Security Headers in Response.OnStarting

#39 agilenut opened 5 years ago
7
Exclude Hsts middleware for asp.net core 2.2 version

#38 SychevIgor closed 5 years ago
0
packages update

#37 SychevIgor closed 5 years ago
2
What about 'data' URIs?

#36 Zettersten closed 3 years ago
1
Partial view issue

#35 JandosKh closed 5 years ago
1
Add support for manifest-src CSP directive

#34 MrMDavidson closed 5 years ago
1
adding in changes for the nonce service

#33 rhux opened 5 years ago
0
CSP manifest-src directive not supported

#32 marcwittke closed 5 years ago
3
'unsafe-inline' is ignored if either a hash or nonce value is present in the source list

#31 ace37 opened 5 years ago
9
Set up CI with Azure Pipelines

#30 azure-pipelines[bot] closed 5 years ago
0