yireo/magento2-csp-utilities

CSP utilities for various Magento modules

Maintainers

Details

github.com/yireo/Yireo_CspUtilities

Source

Installs: 86 373

Dependents: 5

Suggesters: 0

Security: 0

Stars: 0

Watchers: 1

Forks: 0

Type:magento2-module

1.0.0 2024-08-23 08:18 UTC

Requires

  • magento/framework: ^102.0 || ^103.0

OSL-3.0 b841c3671db26a19ad9cc033439281e9a20e0902

This package is auto-updated.

Last update: 2025-01-23 07:34:29 UTC

README

This Magento 2 module offers CSP utilities for other modules, including various Yireo extensions.

Installation

Installation is usually done via other modules, but if you wanted to separately install this, here you go:

composer require yireo/magento2-csp-utilities
bin/magento module:enable Yireo_CspUtilities

Configuration

  • Inline Script Mode
    • nonce: Generate CSP nonces for Yireo extensions. This is the default, but it is currently not as secure in Magento, if the HTML is cached;
    • hash: Generate CSP hashes for Yireo extensions. This is more secure. However, with this option, your HTTP headers could grow, which could lead into webserver limits;