library csp {🖫 5,044, ⚐ 6, ★ 0}

adeira/csp

Thursday, January 19, 2017
by mrtnzlml
Repository
1 Watchers
0 Stars
5,044 Installations

PHP
1 Dependents
0 Suggesters
1 Forks
0 Open issues
6 Versions
1 % Grown

The README.md

This package is deprecated because CSP support has been added to the nette/http package in version 2.4.4..., _(*1)

Nette/http package does have very similar syntax and additionally it support nonces. Here is the future syntax:, _(*2)

http:
    csp:
        default-src: "'self' https://example.com"
        upgrade-insecure-requests:
        script-src: 'nonce'
        style-src:
            - self
            - https://example.com

Yeah that's right - you don't have to register special extension, because it's already in Nette Framework. Please read more about nonce support in Nette Framework forum., _(*3)