Skip to content

A small and simple library to help generate rules for CSP (Content-Security-Policy) headers.

Notifications You must be signed in to change notification settings

Fearswe/CSP-Header-Generator

Repository files navigation

CSP Header Generator

A small and simple library to help generate rules for CSP (Content-Security-Policy) headers.

Quick features:

  • Enum for most common directive names
  • Constants for some of the common values
  • Can add your own directives, should the enum be incomplete
  • Methods for quickly adding the ones used by Google Tag Manager and analytics (Used this as reference)

Example usage

CSPHeaderBuilder headerBuilder = new CSPHeaderBuilder(CSPHeaderBuilder.StaticValues.None);
headerBuilder.AddDirective(CSPHeaderBuilder.DirectiveType.Font, CSPHeaderBuilder.StaticValues.Self);
headerBuilder.AddDirective(CSPHeaderBuilder.DirectiveType.Img, CSPHeaderBuilder.StaticValues.Self);
headerBuilder.AddDirective(CSPHeaderBuilder.DirectiveType.Img, CSPHeaderBuilder.StaticValues.SchemaData);
headerBuilder.AddDirective(CSPHeaderBuilder.DirectiveType.Style, CSPHeaderBuilder.StaticValues.Self);
headerBuilder.AddGoogleTagManager();

Response.AddHeader("Content-Security-Policy", headerBuilder.ToString());

About

A small and simple library to help generate rules for CSP (Content-Security-Policy) headers.

Topics

Resources

Stars

Watchers

Forks

Packages

No packages published

Languages