Add PoC of report-to header

paragonie / csp-builder

Build Content-Security-Policy headers from a JSON file (or build them programmatically)

https://paragonie.com/projects

MIT License

543 stars 40 forks source link

Add PoC of report-to header #70

Closed Firesphere closed 10 months ago

Firesphere commented 1 year ago

This is a proof-of-concept of adding a report-to header, resolving issue #63

To do:

Ensure the correct header is set in the actual CSP header. It should be the name of the group.
Tests
Code unification to make methods etc. have a similar name
Documentation

Feedback welcome!

Firesphere commented 1 year ago

It is at a "should work" state, I'd like to spend some time updating docs, but I'm lacking time for it :(

paragonie-security commented 10 months ago

The additional dependency broke PHP <7.4 support.

Firesphere commented 10 months ago

I personally don't see why 7.4 support should still be a thing moving forward? For 7.4, there's always the previous version, potentially with a bugfix here and there?

paragonie-security commented 10 months ago

We released v3.x because changing the minimum PHP version is a breaking change.