csp_allows: Tests for what a parsed CSP allows

In hrbrmstr/cspy: Content Security Policy Decomposer & Evaluator

Description

Tests for what a parsed CSP allows

Usage

allows_child_from_source(csp, URL)

allows_connect_to(csp, URL)

allows_font_from_source(csp, URL)

allows_form_action(csp, URL)

allows_frame_ancestor(csp, URL)

allows_frame_from_source(csp, URL)

allows_manifest_from_source(csp, URL)

allows_media_from_source(csp, URL)

allows_navigation(csp, URL)

allows_object_from_source(csp, URL)

allows_prefetch_from_source(csp, URL)

allows_script_from_source(csp, URL)

allows_script_with_nonce(csp, nonce)

allows_style_from_source(csp, URL)

allows_style_with_nonce(csp, nonce)

allows_unsafe_inline_script(csp)

allows_unsafe_inline_style(csp)

allows_worker_from_source(csp, URL)

Arguments

csp	a csp object created with fetch_csp() or parse_csp()
URL	source or destination URL
nonce	a cryptographic nonce

Value

logical

References

Content Security Policy Level 3

hrbrmstr/cspy documentation built on May 20, 2019, 12:35 p.m.