Closed giladgo closed 7 years ago
Let's merge?
Ah, didn't notice that #71 takes care of this as well. In that case, let's merge #71 and close this.
@giladgo In fact my PR do not really implement exactly the same functionality, but It's pretty closed. I'm fan of this one too. For me it makes sense to: A) Merge this two together first and refactor same logic – this thow should share some functions. Then we can create one PR including both. B) Merge one of these at first, rebase second branch and refactor that PR.
Doing some cleanup here, closing this since #79 has this change and more
Configuring CSP in lusca makes the config file look unreadable. Oftentimes, you'll have more than 2-3 entries in
default-src
orimg-src
, and these can be quite long.This PR offers the users a chance to specify entries in the policy with an array, which will allow them to break it into lines, and make the config files much more readable and debuggable.
Compare
to
For backwards compatability, the ability to specify it as a string like before was retained.