h4ck3r31/csp-details

TYPO3 Content-Security-Policy Violation Details

Maintainers

Details

github.com/hofhaeckerei/csp-details

Source

Issues

Installs: 31

Dependents: 0

Suggesters: 0

Security: 0

Stars: 0

Watchers: 1

Forks: 0

Open Issues: 0

Type:typo3-cms-extension

v1.0.3 2023-05-23 22:20 UTC

Requires

GPL-2.0-or-later e2306d7f2fc1a495ef92d421dac3980fcb25032a

  • Oliver Hader <oliver.woop@typo3.org>

This package is auto-updated.

Last update: 2024-03-24 08:16:43 UTC

README

Provides additional details for CSP violations in TYPO3 v12 - like dynamic HTML markup that was rendered, or more navigator/browser details.

There are several "surprises" with CSP violations, great details and insights are collected at https://github.com/nico3333fr/CSP-useful/blob/master/csp-wtf/explained.md

Installation

composer req h4ck3r31/csp-details

⚠️ When enabling this package (via Admin Tools, Extension Settings), the generated logs might consume a lot of storage space withing a short amount of time. Thus, please take care of rotating/compressing these files or just have it enabled only while debugging.

Configuration

ℹ️ This package needs to be enabled explicity via Admin Tools, Extension Settings!

Once enabled, details are logged to var/log/typo3_csp-details_*.log.

⚠️ Logged details might contain tokens or other private details of the current user sessions. Please make sure to frequently clean up these files, and just enable the debug functionality of this package just for a very limited time.