Repository navigation

Add a Report-Only Content-Security-Policy baseline - #464

Closed

jeremy wants to merge 4 commits into

mainfrom

security/xss-campaign-writebook-csp-report-only

Closed

Add a Report-Only Content-Security-Policy baseline#464
jeremy wants to merge 4 commits into
mainfrom
security/xss-campaign-writebook-csp-report-only

Commits on Aug 8, 2026
- Add a Report-Only Content-Security-Policy baseline
  jeremy
  committed
  8f3ec57
Commits on Aug 9, 2026
- Add a session-stable CSP nonce and complete the directive set
  jeremy
  committed
  9ea7017
- Make CSP embed directives configurable per install
  jeremy
  committed
  fe1e661
- Tokenize CSP_EXTRA_* semicolons to avoid a per-request 500
  jeremy
  committed
  c8e13ba