Hacker News new | ask | show | jobs
by sudodevnull 433 days ago
I have thoughts about a fully compliant CSP middleware, problem is it's per language so I'd probably only make for Go (maybe PHP & TS)
1 comments
geoka9 433 days ago
Hashes or nonces?
link
sudodevnull 433 days ago
Hashed script content
link
geoka9 433 days ago
Thank you for doing this. Is it possible to follow the work somewhere?
link
sudodevnull 432 days ago
Not right now. CSP in a Datastar context is mostly a red herring. If an enterprise wants it to check a box then please reach out.
link
geoka9 431 days ago
I don't represent an enterprise; just a dev. It would make it easier to sell the idea of Datastar to clients if it was compatible with strict CSP.
link