paragonie csp-builder issues

paragonie / csp-builder

Build Content-Security-Policy headers from a JSON file (or build them programmatically)

https://paragonie.com/projects

MIT License

544 stars 39 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Prevent duplicated entries in policies

#77 rmpel closed 3 months ago
0
un-deprecate `frame-src`

#76 fritzmg closed 8 months ago
0
Calling disableOldBrowserSupport can lead to un-expected regressions with frame-src directives

#75 fredericgboutin-yapla opened 9 months ago
0
Add a CSP header parser (`CSPBuilder::fromHeader`)

#74 fritzmg closed 1 year ago
3
Add support for `psr/http-message` v2

#73 internalsystemerror closed 1 year ago
1
`script-src-elem`, `script-src-attr`, `style-src-elem` and `style-src-attr` are not supported

#72 internalsystemerror closed 1 year ago
1
Fix support for script-src-{elem|attr}, Add support for style-src-{elem|attr}

#71 internalsystemerror closed 1 year ago
0
Add PoC of report-to header

#70 Firesphere closed 8 months ago
4
Fix `plugin-types` generation

#69 fritzmg closed 1 year ago
0
Allow 'unsafe-hashed-attributes' to be set

#68 fritzmg closed 1 year ago
0
Ignore PHPUnit result cache

#67 fritzmg closed 1 year ago
0
Remove trailing semicolon

#66 fritzmg closed 1 year ago
0
Generate nonce also when only `default-src` policy is applied

#65 fritzmg closed 8 months ago
1
report-uri should not be encoded at all

#64 Firesphere closed 1 year ago
1
Integrate or document report-to

#63 davidsneighbour opened 1 year ago
0
report-uri is encoded in to unuseable string

#62 Firesphere closed 1 year ago
3
Add 'url' type value for report-uri

#61 danieltott closed 1 year ago
2
report-uri gets wrongly encoded

#60 cleptric closed 1 year ago
1
Unsafe hashes

#59 paragonie-security closed 1 year ago
0
Add support for 'unsafe-hashes' policy

#58 LeisureLarry closed 1 year ago
1
Support manifest-src directive

#57 strider72 closed 2 years ago
1
Export policies to JSON

#56 paragonie-security closed 2 years ago
0
Adds hook before save output

#55 BruceGitHub closed 2 years ago
4
Support scheme-source https: directive value

#54 tforesti closed 2 years ago
0
Add method for retrieving value set for a directive

#53 bkosborne closed 3 years ago
1
Add support for script-src-elem and script-src-attr

#52 timmit-nl closed 2 years ago
0
Add setReportSample. See #46.

#51 timmit-nl closed 2 years ago
0
Use newer PHPUnit

#50 paragonie-security closed 3 years ago
0
Add support for https: scheme

#49 MrPropre closed 2 years ago
1
Add a removeDirective function to remove directives

#48 iangcarroll closed 3 years ago
1
Add support for 'require-trusted-types-for' policy

#47 MrPropre opened 4 years ago
1
Add support for 'report-sample' directive

#46 MrPropre closed 2 years ago
0
Unable to add "blob" value to connect-src in json file

#45 pradeep518 closed 2 years ago
1
Add an example of report-to to the docs.

#44 iangcarroll closed 4 years ago
0
Add support for the sandbox attribute.

#43 iangcarroll closed 4 years ago
0
Break out the report-to directive from report-uri.

#42 iangcarroll closed 4 years ago
1
missing self in readme example

#41 bnomei opened 4 years ago
0
report-to directive not handled well by Chrome 76

#40 iangcarroll closed 4 years ago
2
Save to JSON

#39 Firesphere closed 2 years ago
1
.htaccess support for headers

#38 Firesphere opened 5 years ago
0
Ability to set both "report-uri" AND "report-to"

#37 OwenMelbz closed 2 years ago
1
Support for Feature-Policy header?

#36 ghost closed 1 year ago
2
Overdue improvements based on reported issues

#35 paragonie-scott closed 6 years ago
0
Update CSPBuilder.php

#34 swiffer closed 6 years ago
0
How to add strict-dynamic ?

#33 strider72 closed 6 years ago
5
what is the use for "type" policies param ?

#32 ncou closed 6 years ago
2
"support older browsers" nonce fix

#31 strider72 opened 6 years ago
5
Update composer.json to use paragonie/random_compat ^2.0

#30 endelwar closed 6 years ago
0
My browser keeps ignoring this.

#29 Nenglish7 closed 2 years ago
1
Cleanup namespaces in examples.

#28 Nenglish7 closed 6 years ago
0