nelmio / NelmioSecurityBundle

Adds extra security-related features in your Symfony application
https://symfony.com/bundles/NelmioSecurityBundle/
MIT License
651 stars 85 forks source link

Evaluate/update`PolicyManager` #358

Open martijnc opened 2 months ago

martijnc commented 2 months ago

While working on #357 I noticed the UA based adaptive directive logic is outdated and it may need an update.

According to MDN's CSP compatibility table, most browsers have caught up to CSP Level 3, with some minor differences.

With current browser support for all CSP levels, the UA based adaptive approach may no longer be needed altogether?