plugin / gravityforms-csp-fixer
Fixes GravityForms plugin so it is CSP compliant.
Installs: 2
Dependents: 0
Suggesters: 0
Security: 0
Stars: 0
Watchers: 3
Forks: 0
Open Issues: 0
Language:JavaScript
Type:wordpress-plugin
pkg:composer/plugin/gravityforms-csp-fixer
Requires
- php: ^7.4|^8.0
Requires (Dev)
- 10up/wp_mock: ~0.5
- friendsofphp/php-cs-fixer: ^2.0
- mockery/mockery: ^1.5
- phpunit/phpunit: ~9.0
- szepeviktor/phpstan-wordpress: ^1.1
README
Gravity Forms is not ready for a Strict CSP enabled site. This plugin tries to fix those issues.
With this plugin you should be able to disallow unsafe-inline and unsafe-eval in your CSP.
If you have other plugins which are not CSP ready, this plugin will not fix those issues.
Features
- Handle inline on* attributes
- Handle inline styling attributes
- Handle inline JavaScript void links