Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Investigate supporting CSP #125

Open
askvortsov1 opened this issue Mar 17, 2021 · 3 comments
Open

Investigate supporting CSP #125

askvortsov1 opened this issue Mar 17, 2021 · 3 comments
Assignees
Labels

Comments

@askvortsov1
Copy link
Sponsor Member

Needs an investigation, replace this issue description when done.

@tankerkiller125
Copy link

I will post an update to this in a couple days, I intend to have the feature at the minimum make it to the next major release. (Given adding it would likely break extensions using external resources)

@tankerkiller125
Copy link

So basic first step, I've found what I think are two suitable libraries for this to automatically build CSP headers for us:

From either of these libraries we would then need to build an extender around them, I'm thinking that it might be best to do this using containers, arrays that can be modified, and the second library. I think this would work very similarly to the way that Middleware works, just instead of modifying one array, we'll be modifying multiple arrays as needed.

@askvortsov1 askvortsov1 transferred this issue from flarum/framework Mar 10, 2022
@JoshyPHP
Copy link

Ping me if work on this is restarted and you have questions about the live preview.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

3 participants