kenshodigital/kirby-csp

最新稳定版本：1.1.0

Composer 安装命令：


                            composer require kenshodigital/kirby-csp

包简介

Adds a strict CSP header to Kirby projects.

Adds a strict CSP header to Kirby projects.

Uses Kirby’s native nonce feature (used for the panel) to add a strict nonce-based content security policy header to all Kirby responses.

composer require kenshodigital/kirby-csp ^1.1

The plugin is not configurable and just follows the latest best practices.

script-src 'nonce-[…]' 'strict-dynamic' 'unsafe-inline' https:; object-src 'none'; base-uri 'none';

However, scripts in your frontend are expected to include a nonce, like this.

<script nonce="<?= $kirby->nonce() ?>">
  …
</script>