issues
search
paragonie
/
csp-builder
Build Content-Security-Policy headers from a JSON file (or build them programmatically)
https://paragonie.com/projects
MIT License
544
stars
39
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Prevent duplicated entries in policies
#77
rmpel
closed
3 months ago
0
un-deprecate `frame-src`
#76
fritzmg
closed
8 months ago
0
Calling disableOldBrowserSupport can lead to un-expected regressions with frame-src directives
#75
fredericgboutin-yapla
opened
9 months ago
0
Add a CSP header parser (`CSPBuilder::fromHeader`)
#74
fritzmg
closed
1 year ago
3
Add support for `psr/http-message` v2
#73
internalsystemerror
closed
1 year ago
1
`script-src-elem`, `script-src-attr`, `style-src-elem` and `style-src-attr` are not supported
#72
internalsystemerror
closed
1 year ago
1
Fix support for script-src-{elem|attr}, Add support for style-src-{elem|attr}
#71
internalsystemerror
closed
1 year ago
0
Add PoC of report-to header
#70
Firesphere
closed
8 months ago
4
Fix `plugin-types` generation
#69
fritzmg
closed
1 year ago
0
Allow 'unsafe-hashed-attributes' to be set
#68
fritzmg
closed
1 year ago
0
Ignore PHPUnit result cache
#67
fritzmg
closed
1 year ago
0
Remove trailing semicolon
#66
fritzmg
closed
1 year ago
0
Generate nonce also when only `default-src` policy is applied
#65
fritzmg
closed
8 months ago
1
report-uri should not be encoded at all
#64
Firesphere
closed
1 year ago
1
Integrate or document report-to
#63
davidsneighbour
opened
1 year ago
0
report-uri is encoded in to unuseable string
#62
Firesphere
closed
1 year ago
3
Add 'url' type value for report-uri
#61
danieltott
closed
1 year ago
2
report-uri gets wrongly encoded
#60
cleptric
closed
1 year ago
1
Unsafe hashes
#59
paragonie-security
closed
1 year ago
0
Add support for 'unsafe-hashes' policy
#58
LeisureLarry
closed
1 year ago
1
Support manifest-src directive
#57
strider72
closed
2 years ago
1
Export policies to JSON
#56
paragonie-security
closed
2 years ago
0
Adds hook before save output
#55
BruceGitHub
closed
2 years ago
4
Support scheme-source https: directive value
#54
tforesti
closed
2 years ago
0
Add method for retrieving value set for a directive
#53
bkosborne
closed
3 years ago
1
Add support for script-src-elem and script-src-attr
#52
timmit-nl
closed
2 years ago
0
Add setReportSample. See #46.
#51
timmit-nl
closed
2 years ago
0
Use newer PHPUnit
#50
paragonie-security
closed
3 years ago
0
Add support for https: scheme
#49
MrPropre
closed
2 years ago
1
Add a removeDirective function to remove directives
#48
iangcarroll
closed
3 years ago
1
Add support for 'require-trusted-types-for' policy
#47
MrPropre
opened
4 years ago
1
Add support for 'report-sample' directive
#46
MrPropre
closed
2 years ago
0
Unable to add "blob" value to connect-src in json file
#45
pradeep518
closed
2 years ago
1
Add an example of report-to to the docs.
#44
iangcarroll
closed
4 years ago
0
Add support for the sandbox attribute.
#43
iangcarroll
closed
4 years ago
0
Break out the report-to directive from report-uri.
#42
iangcarroll
closed
4 years ago
1
missing self in readme example
#41
bnomei
opened
4 years ago
0
report-to directive not handled well by Chrome 76
#40
iangcarroll
closed
4 years ago
2
Save to JSON
#39
Firesphere
closed
2 years ago
1
.htaccess support for headers
#38
Firesphere
opened
5 years ago
0
Ability to set both "report-uri" AND "report-to"
#37
OwenMelbz
closed
2 years ago
1
Support for Feature-Policy header?
#36
ghost
closed
1 year ago
2
Overdue improvements based on reported issues
#35
paragonie-scott
closed
6 years ago
0
Update CSPBuilder.php
#34
swiffer
closed
6 years ago
0
How to add strict-dynamic ?
#33
strider72
closed
6 years ago
5
what is the use for "type" policies param ?
#32
ncou
closed
6 years ago
2
"support older browsers" nonce fix
#31
strider72
opened
6 years ago
5
Update composer.json to use paragonie/random_compat ^2.0
#30
endelwar
closed
6 years ago
0
My browser keeps ignoring this.
#29
Nenglish7
closed
2 years ago
1
Cleanup namespaces in examples.
#28
Nenglish7
closed
6 years ago
0
Next