Skip to content

Issues: northwood-labs/csp-parser

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

21 Open 0 Closed
21 Open 0 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

[ENH] Implement support for resolving multiple CSP policies.
#21 opened Jun 11, 2024 by skyzyx
[BUG] frame-ancestors directive should error on 'unsafe-eval' or 'unsafe-inline'.
#20 opened Jun 11, 2024 by skyzyx
[ENH] Implement support for trusted-types.
#19 opened Jun 11, 2024 by skyzyx
[ENH] Implement support for require-trusted-types-for.
#18 opened Jun 11, 2024 by skyzyx
[ENH] Implement support for fenced-frame-src.
#17 opened Jun 11, 2024 by skyzyx
[ENH] Provide a web interface
#16 opened Jun 11, 2024 by skyzyx
@skyzyx
[CHORE] Review Mozilla Observatory
#15 opened Jun 11, 2024 by skyzyx
@skyzyx
[CHORE] Review https://github.com/google/csp-evaluator
#14 opened Jun 11, 2024 by skyzyx
@skyzyx
[ENH] Identify column and snippet information when errors are discovered.
#13 opened Jun 11, 2024 by skyzyx
@skyzyx
[ENH] Parse HTML content to match things like meta tags and script/style elements
#12 opened Jun 11, 2024 by skyzyx
@skyzyx
[ENH] Detect misconfigurations across multiple directives.
#11 opened Jun 11, 2024 by skyzyx
@skyzyx
[ENH] 'unsafe-eval' should trigger an error.
#10 opened Jun 11, 2024 by skyzyx
@skyzyx
[ENH] filesystem: should trigger an error.
#9 opened Jun 11, 2024 by skyzyx
@skyzyx
[ENH] blob: should trigger an error.
#8 opened Jun 11, 2024 by skyzyx
@skyzyx
[ENH] Add SARIF output format.
#7 opened Jun 11, 2024 by skyzyx
@skyzyx
[ENH] Implement support for fallback resolution.
#6 opened Jun 11, 2024 by skyzyx
@skyzyx
[ENH] Each policy has an associated self-origin, which is an origin that is used when matching the 'self' keyword.
#5 opened Jun 11, 2024 by skyzyx
@skyzyx
[ENH] Each policy has an associated source, which is either "header" or "meta".
#4 opened Jun 11, 2024 by skyzyx
@skyzyx
[ENH] data: should trigger an error.
#3 opened Jun 11, 2024 by skyzyx
@skyzyx
[ENH] 'unsafe-inline' should trigger an error.
#2 opened Jun 11, 2024 by skyzyx
@skyzyx
[BUG] Duplicated directives should be ignored. The first takes precedence.
#1 opened Jun 11, 2024 by skyzyx
@skyzyx
ProTip! Type g p on any issue or pull request to go back to the pull request listing page.