kenshodigital/kirby-csp

Adds a strict policy CSP header to Kirby projects.

1.0.0 2024-03-17 18:05 UTC

Requires

• php: ^8.3
• getkirby/cms: ^4.1
• getkirby/composer-installer: ^1.2

MIT

README

Adds a strict policy CSP header to Kirby projects.

General

Uses Kirby’s native nonce feature (used for the panel) to add a strict nonce-based content security policy header to all Kirby responses.

Installation

composer require kenshodigital/kirby-csp ^1.0

Usage

The plugin is not configurable and just follows the latest best practices.

However, scripts in your frontend are expected to include a nonce and the Kirby docs already provide a good example for this.

<script nonce="<?= $kirby->nonce() ?>">…</script>