Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Implement CSP presets (and a more reasonable default) #3

Open
16patsle opened this issue Oct 15, 2021 · 0 comments
Open

Implement CSP presets (and a more reasonable default) #3

16patsle opened this issue Oct 15, 2021 · 0 comments
Labels
enhancement New feature or request

Comments

@16patsle
Copy link
Owner

Currently the default is default-src: 'self', but we could probably have a choice between three different presets.

  • Self: Like currently. It could probably include other domains that might get requested in a typical core WordPress installation too (if any). At least the logged in and admin backend should be more permissive.
  • Typical: Should reflect a typical WordPress installation, including popular third party plugins or domains (probably stuff like Google Fonts, Google Analytics and Jetpack, which are all commonly used), and fairly permissive for the admin backend.
  • Permissive: Should accept almost everything (though maybe a few common restrictions?)
@16patsle 16patsle added the enhancement New feature or request label Oct 15, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@16patsle