nieuwenhuizen/content-security-policy

Readme excerpt

Nieuwenhuizen.ContentSecurityPolicy

Flow/Neos package to set your site's content security policy header easily with yaml

• Usage
• Custom directives
• Disable or report
• Nonce
• Backend

Usage

Import the package using composer:

composer require nieuwenhuizen/content-security-policy

The package is automatically active once imported. By default the response header Content-Security-Policy will now be included.

It will use the default configuration which looks like this:

Nieuwenhuizen: ContentSecurityPolicy: enabled: true report-only: false content-security-policy: default: b…
Read more