• zero-24's avatar
    [4.0] [CSP] Initial Integration of com_csp & plg_system_httpheaders (#20847) · cbccd826
    zero-24 authored
    * initial integration part; rename the global nonce var; append nonce to the styles too
    
    * add the missing lines
    
    * more code more fixes
    
    * another round of fixes
    
    * new array syntx feels better
    
    * move the reporter to the plugin switch; remove com_csp option; language strings and some other stuff
    
    * fix unsafe-eval / unsafe-inline
    
    * typo
    
    * nonce for custom rule
    
    * already collect eval and inline in the correct way
    
    * typo
    
    * some more fixes
    
    * add client to the csp Informations
    
    * site -> client
    
    * namesspaces & some fixes
    
    * make sure we have a default-src
    
    * default-src and no header when no reports
    
    * some fixes
    
    * remove inline styles in com_csp & dont set an empty header
    
    * Allow the nonce to be disabled
    
    * add langauge strings
    
    * drone
    
    * drone again
    
    * rename option
    
    * inline typos thanks @brianteeman
    
    * drone again ..
    
    * add missing filter
    
    * thanks @quy
    
    * thanks @brianteeman
    
    * another thanks to @brianteeman
    
    * another inline commets
    
    * as a key
    
    * rel='noopener noreferrer' cc @brianteeman
    cbccd826
httpheaders.xml 5.89 KB