Skip to content

Implement Csp#361

Open
TheSyscall wants to merge 23 commits intomainfrom
cps
Open

Implement Csp#361
TheSyscall wants to merge 23 commits intomainfrom
cps

Conversation

@TheSyscall
Copy link
Copy Markdown

@TheSyscall TheSyscall commented Mar 23, 2026

Add a Csp class which represents the Content-Security-Policy header.

This new class can be used to manage the content security policy.
This class enforces default-src 'self' as a baseline for a secure web application.
The first nonce added to any directive is selected as THE nonce for the CSP.
Setting a nonce is not supported since a nonce could appear in any number of different directives.

Comment thread src/Common/Csp.php Outdated
Comment thread src/Common/Csp.php Outdated
Comment thread src/Common/Csp.php Outdated
Comment thread src/Common/Csp.php Outdated
@TheSyscall TheSyscall requested a review from Al2Klimov March 24, 2026 12:34
Al2Klimov

This comment was marked as resolved.

@TheSyscall TheSyscall requested a review from Al2Klimov March 25, 2026 11:43
Al2Klimov
Al2Klimov previously approved these changes Mar 31, 2026
Copy link
Copy Markdown
Member

@Al2Klimov Al2Klimov left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested together with Icinga/icingaweb2#5477 (review).

@TheSyscall TheSyscall requested a review from Al2Klimov April 7, 2026 12:52
Comment thread src/Common/Csp.php Outdated
Comment thread src/Common/Csp.php Outdated
Comment thread src/Common/Csp.php Outdated
Comment thread src/Common/Csp.php Outdated
Comment thread src/Common/Csp.php Outdated
Comment thread src/Common/Csp.php Outdated
Comment thread src/Common/Csp.php Outdated
Comment thread src/Common/Csp.php Outdated
@TheSyscall TheSyscall requested a review from Al2Klimov April 15, 2026 07:07
@Al2Klimov Al2Klimov removed their request for review April 16, 2026 10:47
@TheSyscall TheSyscall requested a review from Al2Klimov April 16, 2026 12:08
Al2Klimov

This comment was marked as resolved.

TheSyscall and others added 3 commits April 17, 2026 09:02
Co-authored-by: Alexander Aleksandrovič Klimov <al2klimov@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants