CSP-Bypass
CSP-Bypass copied to clipboard
moloch--
A Burp Plugin for Detecting Weaknesses in Content Security Policies
While using this library in another project I noticed it throws a `ValueError` when a CSP makes use of the `xhr-src` directive. According to [MDN](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/connect-src): > Prior to Firefox 23,...
Hi, I noticed that some CSP directives reported by this extender are obsolete, and are reported by your tool. Is it possible to update this extender accordingly? - 'referrer': https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/referrer...
Hi Joe, This is a simple notification to let you know that I have built a [very similar extension](https://github.com/GoSecure/csp-auditor/). Both have passive rules to analyze CSP header(s). I initially start...
