Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CSP guide updates #36157

Open
wants to merge 30 commits into
base: main
Choose a base branch
from
+438 −89
Open

CSP guide updates #36157

Show file tree
Hide file tree
Changes from 6 commits
Commits
Show all changes
30 commits
Select commit Hold shift + click to select a range
98cd0f8
First commit of new CSP guide
wbamberg Oct 2, 2024
b134003
Add example
wbamberg Oct 2, 2024
52dafb7
Added clickjacking and upgrade-insecure-requests
wbamberg Oct 3, 2024
963ed84
Further clarifications on upgrade-insecure
wbamberg Oct 3, 2024
011933b
Add sections on testing
wbamberg Oct 3, 2024
7fc8da8
Add See also
wbamberg Oct 4, 2024
07ee824
Update files/en-us/web/http/csp/index.md
wbamberg Oct 7, 2024
e6ddac6
Update files/en-us/web/http/csp/index.md
wbamberg Oct 7, 2024
e10f3fb
Update files/en-us/web/http/csp/index.md
wbamberg Oct 7, 2024
c221312
Merge
wbamberg Oct 11, 2024
18296b8
Talk more about XSS
wbamberg Oct 16, 2024
68953e4
Update files/en-us/web/http/csp/index.md
wbamberg Oct 16, 2024
ca9a4b7
Warningify unsafe-inline
wbamberg Oct 16, 2024
6ef3cb6
Merge remote-tracking branch 'origin/csp-guide' into csp-guide
wbamberg Oct 16, 2024
98c3d78
Boldify make unguessable nonces
wbamberg Oct 16, 2024
1ada7b0
Explain what directives in the first example are doing
wbamberg Oct 16, 2024
af9d8fe
Update files/en-us/web/http/csp/index.md
wbamberg Oct 16, 2024
c52d77d
Update files/en-us/web/http/csp/index.md
wbamberg Oct 16, 2024
e1e0407
Give example use case for hostname policy
wbamberg Oct 17, 2024
a79321c
Update files/en-us/web/http/csp/index.md
wbamberg Oct 17, 2024
19069ca
Add CSP header name, use http styling
wbamberg Oct 17, 2024
08c8663
Use scripts instead oif images
wbamberg Oct 17, 2024
6087906
Talk about when meta tag CSP delivery is a good option
wbamberg Oct 17, 2024
ebe28b6
Update files/en-us/web/http/csp/index.md
wbamberg Oct 18, 2024
6f2c62e
Update files/en-us/web/http/csp/index.md
wbamberg Oct 18, 2024
29eb3c6
Update files/en-us/web/http/csp/index.md
wbamberg Oct 18, 2024
c82a4b7
Update files/en-us/web/http/csp/index.md
wbamberg Oct 18, 2024
feba218
Update files/en-us/web/http/csp/index.md
wbamberg Oct 18, 2024
079e4f0
More review comments
wbamberg Oct 18, 2024
8f6af6d
Reorder fetch source expression types
wbamberg Oct 18, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions files/en-us/web/http/csp/csp-overview.svg
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
3 changes: 3 additions & 0 deletions files/en-us/web/http/csp/csp-source-expressions.svg
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading