paragonie/csp-builder

Issues

• Calling disableOldBrowserSupport can lead to un-expected regressions with frame-src directives

  #75 opened 7 months ago by fredericgboutin-yapla
  0

• `script-src-elem`, `script-src-attr`, `style-src-elem` and `style-src-attr` are not supported

  #72 opened a year ago by internalsystemerror
  1

• report-uri is encoded in to unuseable string

  #62 opened a year ago by Firesphere
  3

• Integrate or document report-to

  #63 opened a year ago by davidsneighbour
  0

• report-uri gets wrongly encoded

  #60 opened a year ago by cleptric
  1

• Support for Feature-Policy header?

  #36 opened 2 years ago
  2

• Add support for 'require-trusted-types-for' policy

  #47 opened 4 years ago by MrPropre
  1

• Add support for 'unsafe-hashes' policy

  #58 opened 2 years ago by LeisureLarry
  1

• Support manifest-src directive

  #57 opened 2 years ago by strider72
  1

• Unable to add "blob" value to connect-src in json file

  #45 opened 3 years ago by pradeep518
  1

• Add support for script-src-elem and script-src-attr

  #52 opened 3 years ago by timmit-nl
  0

• My browser keeps ignoring this.

  #29 opened 3 years ago by Nenglish7
  1

• Suggestion: check for duplicate addSource

  #23 opened 3 years ago by strider72
  1

• DOCUMENTATION?????????????

  #18 opened 3 years ago by strider72
  9

• Save to JSON

  #39 opened 3 years ago by Firesphere
  1

• Add support for 'report-sample' directive

  #46 opened 3 years ago by MrPropre
  0

• Ability to set both "report-uri" AND "report-to"

  #37 opened 3 years ago by OwenMelbz
  1

• Add support for https: scheme

  #49 opened 3 years ago by MrPropre
  1

• Add method for retrieving value set for a directive

  #53 opened 4 years ago by bkosborne
  1

• report-to directive not handled well by Chrome 76

  #40 opened 5 years ago by iangcarroll
  2

• report-uri deprecated

  #27 opened 6 years ago by Nenglish7
  3

• missing self in readme example

  #41 opened 5 years ago by bnomei
  0

• .htaccess support for headers

  #38 opened 5 years ago by Firesphere
  0

• "support older browsers" nonce fix

  #31 opened 6 years ago by strider72
  5

• what is the use for "type" policies param ?

  #32 opened 6 years ago by ncou
  2

• Add worker-src

  #24 opened 6 years ago by strider72
  1

• Add require-sri-for directive.

  #25 opened 6 years ago by Zegnat
  0

• How to add strict-dynamic ?

  #33 opened 6 years ago by strider72
  5

• Nonce means number used once, random bytes used

  #26 opened 6 years ago by frederikbosch
  7

• Allow adding "blob" as source in JSON

  #17 opened 7 years ago by daniplaninc
  3

• Invokable Extension

  #8 opened 7 years ago by geggleto
  6

• Functions and classes starting with a backslash

  #20 opened 7 years ago by gszy
  2

• Add data: uris

  #16 opened 7 years ago by gdhnz
  5

• ambiguity: PSR-7 Message

  #7 opened 8 years ago by geggleto
  6

• PSR-7 support, or else array of headers to be returned

  #5 opened 8 years ago by Ocramius
  13

• Support frame-src for compatibility with WebKit (CSP 1)

  #2 opened 8 years ago by ScottHelme
  2

• Add a scheme to whitelisted hosts by default if not specified

  #3 opened 8 years ago by ScottHelme
  4

• Content security policy for plugin-types

  #4 opened 8 years ago by Lewiscowles1986
  1

• Add X-Content-Security-Policy and X-WebKit-CSP to sendCSPHeader()

  #1 opened 9 years ago by timoh6
  1