Example Usage
{
"report-only": false,
"report-to": "PolicyName",
"report-uri": "/csp_violation_reporting_endpoint",
"base-uri": [],
"default-src": [],
"child-src": {
"allow": [
"https://www.youtube.com",
"https://www.youtube-nocookie.com"
],
"self": false
},
"connect-src": [],
"font-src": {
"self": true
},
"form-action": {
"allow": [
"https://example.com"
],
"self": true
},
"frame-ancestors": [],
"img-src": {
"blob": true,
"self": true,
"data": true
},
"media-src": [],
"object-src": [],
"plugin-types": [],
"script-src": {
"allow": [
"https://www.google-analytics.com"
],
"self": true,
"unsafe-inline": false,
"unsafe-eval": false
},
"style-src": {
"self": true
},
"upgrade-insecure-requests": true
}
See also
Retire.js
Open Source
Detects the use of JavaScript libraries with known vulnerabilities. Available as a CLI tool, browser…
JWT_Tool
Open Source
Toolkit for testing, tampering, and forging JSON Web Tokens. Tests common JWT vulnerabilities includ…
BeEF
Open Source
Kali
Browser Exploitation Framework. Hooks web browsers via JavaScript and provides extensive command mod…
waf-bypass
Open Source
Check your WAF before an attacker does…
aizawa
Open Source
Aizawa is a command-line webshell designed to execute commands through HTTP header…
BSCP
Free
Cheatsheet, Notes, Payloads and Mayhem for Burp Suite Practitioner Exam (BSCP)…