|
|
|
|
|
by pgilad
2671 days ago
|
|
Thanks! I like your work on it. I have several ideas on how to generally improve the CSP development that I want to implement, and needed a good infrastructure for doing it:
- CSP optimizations, like removing redundant fields (like a minifier)
- CSP parsing
- CSP security warnings or rating (like for unsafe eval)
- CSP Presets, might be general presets, or extendable presets for various tools, like Google Analytics for example
- CSP deprecations and level supports So far, I've created this tool to help me with it's usage (See https://github.com/pgilad/www.giladpeleg.com/blob/master/scr...), but the best feature is by far using Typescript (I considered using Java) for typed directives and sources. |
|