Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CSP guide updates #36157

Merged
merged 39 commits into from
Oct 28, 2024
Merged
Show file tree
Hide file tree
Changes from 33 commits
Commits
Show all changes
39 commits
Select commit Hold shift + click to select a range
98cd0f8
First commit of new CSP guide
wbamberg Oct 2, 2024
b134003
Add example
wbamberg Oct 2, 2024
52dafb7
Added clickjacking and upgrade-insecure-requests
wbamberg Oct 3, 2024
963ed84
Further clarifications on upgrade-insecure
wbamberg Oct 3, 2024
011933b
Add sections on testing
wbamberg Oct 3, 2024
7fc8da8
Add See also
wbamberg Oct 4, 2024
07ee824
Update files/en-us/web/http/csp/index.md
wbamberg Oct 7, 2024
e6ddac6
Update files/en-us/web/http/csp/index.md
wbamberg Oct 7, 2024
e10f3fb
Update files/en-us/web/http/csp/index.md
wbamberg Oct 7, 2024
c221312
Merge
wbamberg Oct 11, 2024
18296b8
Talk more about XSS
wbamberg Oct 16, 2024
68953e4
Update files/en-us/web/http/csp/index.md
wbamberg Oct 16, 2024
ca9a4b7
Warningify unsafe-inline
wbamberg Oct 16, 2024
6ef3cb6
Merge remote-tracking branch 'origin/csp-guide' into csp-guide
wbamberg Oct 16, 2024
98c3d78
Boldify make unguessable nonces
wbamberg Oct 16, 2024
1ada7b0
Explain what directives in the first example are doing
wbamberg Oct 16, 2024
af9d8fe
Update files/en-us/web/http/csp/index.md
wbamberg Oct 16, 2024
c52d77d
Update files/en-us/web/http/csp/index.md
wbamberg Oct 16, 2024
e1e0407
Give example use case for hostname policy
wbamberg Oct 17, 2024
a79321c
Update files/en-us/web/http/csp/index.md
wbamberg Oct 17, 2024
19069ca
Add CSP header name, use http styling
wbamberg Oct 17, 2024
08c8663
Use scripts instead oif images
wbamberg Oct 17, 2024
6087906
Talk about when meta tag CSP delivery is a good option
wbamberg Oct 17, 2024
ebe28b6
Update files/en-us/web/http/csp/index.md
wbamberg Oct 18, 2024
6f2c62e
Update files/en-us/web/http/csp/index.md
wbamberg Oct 18, 2024
29eb3c6
Update files/en-us/web/http/csp/index.md
wbamberg Oct 18, 2024
c82a4b7
Update files/en-us/web/http/csp/index.md
wbamberg Oct 18, 2024
feba218
Update files/en-us/web/http/csp/index.md
wbamberg Oct 18, 2024
079e4f0
More review comments
wbamberg Oct 18, 2024
8f6af6d
Reorder fetch source expression types
wbamberg Oct 18, 2024
131fc0a
Clarify that one nonce value is set on all style/script tags
wbamberg Oct 21, 2024
30c4468
Clarify 'intend to include'
wbamberg Oct 21, 2024
ae79382
Review comment
wbamberg Oct 21, 2024
6f3cd1b
Add javascripot: URLs
wbamberg Oct 22, 2024
2c9204f
Elaborate a little on using hashes for static pages
wbamberg Oct 22, 2024
542f31e
Add linebreak
wbamberg Oct 22, 2024
3bf64a2
Correct heading level
wbamberg Oct 22, 2024
268b66b
Acknowledge that removing eval() can be hard: Link to trusted types
wbamberg Oct 22, 2024
7da65cf
Note that report-only policy can't be delivered in a meta element
wbamberg Oct 22, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions files/en-us/web/http/csp/csp-overview.svg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
3 changes: 3 additions & 0 deletions files/en-us/web/http/csp/csp-source-expressions.svg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading