Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Better default list of world writable domains in CSP checker #3165

Merged
merged 8 commits into from
Jul 8, 2024
Merged

Better default list of world writable domains in CSP checker #3165

Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
83c0fb5
better list of world writable domains csp checker
underdarknl Jun 27, 2024
574c654
Merge branch 'main' into feat/csp-world-writable-domains-defaults
noamblitz Jul 1, 2024
13d3b30
Merge branch 'main' into feat/csp-world-writable-domains-defaults
ammar92 Jul 2, 2024
33e88d5
Update question_schema.json
underdarknl Jul 2, 2024
4753f37
Merge branch 'main' into feat/csp-world-writable-domains-defaults
underdarknl Jul 3, 2024
aea79c3
Merge branch 'main' into feat/csp-world-writable-domains-defaults
noamblitz Jul 4, 2024
761f77b
Merge branch 'main' into feat/csp-world-writable-domains-defaults
underdarknl Jul 5, 2024
124fd67
Merge branch 'main' into feat/csp-world-writable-domains-defaults
dekkers Jul 8, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 1 addition & 2 deletions octopoes/bits/ask_disallowed_domains/question_schema.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,14 +3,13 @@
"$id": "/bit/disallowed-csp-hostnames",
"type": "object",
"default": {},
"Port Configuration": "Root Schema",
"required": [],
"properties": {
"disallowed_hostnames": {
"description": "Comma separated list of disallowed hostnames in CSP headers",
"type": "string",
"pattern": "^(\\s*(,*)[^,]+,?\\s*)*$",
"default": "github.com,google.com"
"default": "githubpages.com,github.io,jsdelivr.com,cdn.skypack.dev"
},
"disallow_url_shorteners": {
"description": "Do you want to disallow url shorteners in csp headers?",
Expand Down