Download the PHP package flancer32/mage2_ext_csp without Composer
On this page you can find all versions of the php package flancer32/mage2_ext_csp. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download flancer32/mage2_ext_csp
More information about flancer32/mage2_ext_csp
Files in flancer32/mage2_ext_csp
Package mage2_ext_csp
Short Description Magento 2 module to collect CSP violations reports and to eliminate JS console warnings.
License GPL-3.0-only
Homepage https://github.com/flancer32/mage2_ext_csp
Informations about the package mage2_ext_csp
mage2_ext_csp
Module to collect CSP violations reports and convert it to the CSP rules.
Attention! Starting from version 0.0.5 module's functionality is disabled by default. You need explicitly enable module in Stores / Configuration / Security / CSP / General
.
Description
There are a lot of Content Security Policy (CSP) warnings in Javascript console for Magento 2.3.5+:
This module adds report-uri ...;
directive to CSP header, collects rules to eliminate CSP warnings in console. Cron tasks to analyze reports & generate rules starts hourly.
The main goal of this module is to remove CSP errors from JS console completely but you can use this module to collect reports only (just disable activation for new rules in config).
You can switch CSP from report only to strict mode (set Report Only
to false
in config) after all violation reports will be converted to the rules and all not-allowed content will be locked by browser.
Installation
composer.json
Docs
- Configuration
- Usage strategy
- Grids:
- Violations reports
- CSP rules
- CLI
- Cron
- DB structure