PHP Classes

File: composer.json

Recommend this page to a friend!
  Packages of Scott Arciszewski   PHP CSP Header Builder   composer.json   Download  
File: composer.json
Role: Auxiliary data
Content type: text/plain
Description: Auxiliary data
Class: PHP CSP Header Builder
Generate Content Security Policy headers
Author: By
Last change: add updates for PHP 8.4
Remove PHP <7.4 support

Undoing the changes in #70 is too annoying right now, and it's high time everyone stopped using PHP <7.4 anyway.

This is going to coincide with a major version bump.
Add json validator dependency
Support PHPUnit 10, Psalm 5
Merge pull request #71 from internalsystemerror/support-attr-and-elem

Fix support for script-src-{elem|attr}, Add support for style-src-{elem|attr}
Don't allow Semicolon or CRLF injection

CSP-Builder is a developer tool. It is not meant to be used with user input.

However, the ability to inject CSP directives or additional headers violates the principle of least astonishment.

This was reported via user demonia on HackerOne.
Fix style
Merge pull request #51 from timmit-nl/master

Add setReportSample. See #46.
PHP 7.0 is EOL anyway.
We need v7

Also, don't test nightly until dependencies support PHP 8
Use newer PHPUnit
Merge pull request #43 from iangcarroll/feature/sandbox

Add support for the sandbox attribute.
Date: 6 months ago
Size: 1,388 bytes
 

Contents

Class file image Download
{ "name": "paragonie/csp-builder", "description": "Easily add and update Content-Security-Policy headers for your project", "keywords": [ "content-security-policy", "csp", "http", "headers", "security", "xss" ], "license": "MIT", "type": "library", "authors": [ { "name": "Paragon Initiative Enterprises", "email": "security@paragonie.com", "homepage": "https://paragonie.com", "role": "Owner" } ], "support": { "issues": "https://github.com/paragonie/csp-builder/issues", "email": "info@paragonie.com", "source": "https://github.com/paragonie/csp-builder" }, "autoload": { "psr-4": { "ParagonIE\\CSPBuilder\\": "src" } }, "autoload-dev": { "psr-4": { "ParagonIE\\CSPBuilderTest\\": "test" } }, "require": { "php": "^7.4|^8", "ext-json": "*", "paragonie/constant_time_encoding": "^2|^3", "psr/http-message": "^1|^2", "opis/json-schema": "^2.3" }, "require-dev": { "phpunit/phpunit": "^7|^8|^9|^10", "squizlabs/php_codesniffer": "^3", "vimeo/psalm": "^4|^5" }, "scripts": { "test": "phpunit && psalm" } }