项目作者: Fearswe

项目描述 :
A small and simple library to help generate rules for CSP (Content-Security-Policy) headers.
高级语言: C#
项目地址: git://github.com/Fearswe/CSP-Header-Generator.git
创建时间: 2019-11-18T15:15:53Z
项目社区:https://github.com/Fearswe/CSP-Header-Generator

开源协议:

下载


CSP Header Generator

A small and simple library to help generate rules for CSP (Content-Security-Policy) headers.

Quick features:

  • Enum for most common directive names
  • Constants for some of the common values
  • Can add your own directives, should the enum be incomplete
  • Methods for quickly adding the ones used by Google Tag Manager and analytics (Used this as reference)

Example usage

  1. CSPHeaderGenerator headerGenerator = new CSPHeaderGenerator(CSPHeaderGenerator.StaticValues.None);
  2. headerGenerator.AddDirective(CSPHeaderGenerator.DirectiveType.Font, CSPHeaderGenerator.StaticValues.Self);
  3. headerGenerator.AddDirective(CSPHeaderGenerator.DirectiveType.Img, CSPHeaderGenerator.StaticValues.Self);
  4. headerGenerator.AddDirective(CSPHeaderGenerator.DirectiveType.Img, CSPHeaderGenerator.StaticValues.SchemaData);
  5. headerGenerator.AddDirective(CSPHeaderGenerator.DirectiveType.Style, CSPHeaderGenerator.StaticValues.Self);
  6. headerGenerator.AddGoogleTagManager();
  7. Response.AddHeader("Content-Security-Policy", headerGenerator.ToString());