Content-Security-Policy

Automatically generate a Content-Security-Policy header for your Drupal site based on your site's libraries.

Roadmap

1.0-Alpha

• #2895229: Create Response Event Subscriber
• #2895242: Create policy from Libraries

1.0-Beta

• #2895241: Configuration to toggle Report-Only
• #2895243: Configuration for manual policy additions
• #2895245: API for modules to add dynamic properties

1.0-RC

• #2895248: Log policy violations via report-uri / report-to endpoint

1.x

• #2895244: Allow separate enforced and report-only policies

Get Involved

If you're interested in getting involved in module development but don't know where to start, reach out to gapple (@gappleca on Twitter).