Skip to content

HttpExtension: allow setup CSP in restrictive and report mode at the …#136

Closed
PavelJurasek wants to merge 2 commits into
nette:masterfrom
PavelJurasek:feature-2
Closed

HttpExtension: allow setup CSP in restrictive and report mode at the …#136
PavelJurasek wants to merge 2 commits into
nette:masterfrom
PavelJurasek:feature-2

Conversation

@PavelJurasek

Copy link
Copy Markdown
Contributor

…same time

Solution for both modes of CSP.
Related to #135.

@PavelJurasek

Copy link
Copy Markdown
Contributor Author

@spaze Do you think it's OK to use the same nonce for CSP and CSP-ReportOnly headers?

@dg

dg commented Mar 14, 2018

Copy link
Copy Markdown
Member

Thanks! (I've simplified code a little bit)

@dg dg closed this in edc6e04 Mar 14, 2018
dg pushed a commit that referenced this pull request Mar 14, 2018
@PavelJurasek

Copy link
Copy Markdown
Contributor Author

I thank you! 🙏
I'll be happy to see new release as it has been over 6 months since last release.

@spaze

spaze commented Mar 20, 2018

Copy link
Copy Markdown
Contributor

@PavelJurasek

Do you think it's OK to use the same nonce for CSP and CSP-ReportOnly headers?

It is. Also, nice addition, although csp-report might be a bit misleading, I'd suggest csp-report-only or something but it's probably too late.

@dg

dg commented Aug 28, 2018

Copy link
Copy Markdown
Member

I have changed option to cspReportOnly to be consistent with the rest of configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants