adeira/csp

This package is abandoned and no longer maintained. The author suggests using the nette/http package instead.

v1.0.4 2017-01-18 08:01 UTC

Requires

• adeira/code-quality: ^1.0
• nette/di: ^2.3

Requires (Dev)

• nette/php-generator: ^2.3
• nette/tester: dev-master
• nette/utils: ^2.4

BSD-3-Clause, GPL-2.0, GPL-3.0

README

This package is deprecated because CSP support has been added to the nette/http package in version 2.4.4...

Nette/http package does have very similar syntax and additionally it support nonces. Here is the future syntax:

http:
    csp:
        default-src: "'self' https://example.com"
        upgrade-insecure-requests:
        script-src: 'nonce'
        style-src:
            - self
            - https://example.com

Yeah that's right - you don't have to register special extension, because it's already in Nette Framework. Please read more about nonce support in Nette Framework forum.