Download the PHP package hk2/csp without Composer

On this page you can find all versions of the php package hk2/csp. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:
If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

  • Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
  • To use Composer is sometimes complicated. Especially for beginners.
  • Composer needs much resources. Sometimes they are not available on a simple webspace.
  • If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
  • Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Please rate this library. Is it a good library?

Example code of hk2/csp

Informations about the package csp

HK2 CSP Whitelisting

Version License Magento PHP Downloads

Overview

HK2 CSP is a Magento 2 extension that enables administrators to manage Content Security Policy (CSP) whitelists dynamically. In addition to a robust set of pre-configured whitelist hosts for third-party scripts, styles, fonts, images, frames, and connections, it provides an admin interface to add custom domains without touching configuration files.

🎯 Use Cases

🚀 Features

🏗 Architecture

🧩 Magento Components

Blocks

Plugins

Controllers

📦 Requirements

⚙️ Installation

  1. composer require hk2/csp
  2. bin/magento module:enable HK2_Csp
  3. bin/magento setup:upgrade
  4. bin/magento setup:di:compile
  5. bin/magento cache:flush

🔧 Configuration

Configure settings under Stores > Configuration > HK2 > CSP Whitelisting:

Field Description
Script Src URLs Comma-separated list of script host domains (e.g. *.example.com).
Style Src URLs Comma-separated list of style host domains.
Image Src URLs Comma-separated list of image host domains.
Connect Src URLs Comma-separated list of connect/API host domains.
Font Src URLs Comma-separated list of font host domains.
Frame Src URLs Comma-separated list of frame/iframe host domains.
Reset CSP Button to clear all scopes and restore default whitelists.

Usage

Navigate to Stores > Configuration > HK2 > CSP Whitelisting, populate domains matching your external integrations, and save. Run bin/magento cache:flush to apply.

🗄 Database Changes

Not Applicable

📂 Module Structure

📈 Performance Considerations

The policies list is cached inside Magento's standard configuration cache, preventing database queries or regex calculations on standard page loads.

🔐 Security Considerations

Compatibility

Reference: docs/compatibility.md

Platform Supported Versions
Magento 2.4.4 - 2.4.9
PHP 8.1, 8.2, 8.3, 8.4

🛠 Troubleshooting

Dynamic values not appearing in CSP header

Verify you have flushed the configuration cache after making changes: bin/magento cache:flush.

🤝 Contributing

Contributions are welcome! If you'd like to improve the installer:

Every ⭐ helps increase the visibility of the project and motivates further development.

⚖️ Disclaimer

The author provides this installation script "as is" without any warranties. Users are responsible for ensuring that running this script complies with their internal security and software requirements.

🤝 Support

For bug reports, feature requests, and general support:

License

This project is licensed under the OSL 3.0 License. See the LICENSE.txt file for details.

All versions of csp with dependencies

PHP Build Version
Package Version
Requires hk2/core Version ^1.0
magento/framework Version ^103.0.0
magento/module-csp Version ^100.4
php Version ^8.1 || ^8.2 || ^8.3 || ^8.4
Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package hk2/csp contains the following files

Loading the files please wait ...