nelmio / NelmioSecurityBundle

Adds extra security-related features in your Symfony application
https://symfony.com/bundles/NelmioSecurityBundle/
MIT License
651 stars 85 forks source link

Filter `view-source` reports #333

Closed fritzmg closed 7 months ago

fritzmg commented 8 months ago

Firefox reports a CSP violation on the view-source view for any URL with a Content-Security-Policy directive for default-src or style-src (except unsafe-inline of course) - and also sends a CSP report to the report-uri. This PR filters any reports sent from view-source views.