Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable users to monitor their created content security policies for the most common issues #15

Open
2 tasks
azasypkin opened this issue Jun 7, 2023 · 0 comments
Labels
Category: Feature New feature or request Component: Utility: CSP Issue related to CSP utility

Comments

@azasypkin
Copy link
Member

azasypkin commented Jun 7, 2023

Summary

Currently, we only allow users to create, store, and deploy content security policies. We don't provide any capabilities to help them ensure that the policies are correctly deployed and remain correct throughout their entire lifespan.

There are several common issues with CSP that we can potentially check for: non-unique nonces, deprecated directives, unexpected changes in the deployed policy, or unintentionally removed policies. Here's how we can display this information in the Secutils.dev UI:

Prerequisites

  • We need a way for users to specify their email we'll use to report detected issues. Later we can add Slack/messengers integrations.
  • We need a "cron job"-like module to perform periodic checks
@azasypkin azasypkin added Category: Feature New feature or request Component: Utility: CSP Issue related to CSP utility labels Jun 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Category: Feature New feature or request Component: Utility: CSP Issue related to CSP utility
Projects
Status: 📋 Not started
Development

No branches or pull requests

1 participant