nelmio
[Feature request] Per-page CSP configuration
The clickjacking protection supports applying a different configuration for different paths. It would be great if CSP could do it as well.
See https://github.blog/2016-04-12-githubs-csp-journey/#connect-src which describes a use case that Github has for this (which is also what gave me the idea to request it here. My own CSP journey is not yet at the point where I would need it, but it might come).
We have another example: Sonata Admin uses inline JS. Enabling this for the whole site would be really irresponsible.
Another example would be allowing data: in img-src and unsafe-inline in style-src for googlemaps api. I dont need the api on every page
