csp 0.1.0

Content Security Policy (CSP) declaration parsing and processing.

Overview

A package for processing Content Security Policy declarations.

Licensed under the Apache License 2.0.

Links

• Pub package
• Issue tracker
• Create a pull request

Getting started

1.Add dependency

In pubspec.yaml:

dependencies:
  csp: ^0.1.0

2.Use

import 'package:csp/csp.dart';

Future<void> main() async {
  // Construct CSP
  var csp = Csp(
    defaultSrc: [Csp.self, 'google.com'],
  );

  // Parse CSP
  final parsedCsp = Csp.parse('default-src: microsoft.com');

  // Merge CSPs
  final mergedCsp = Csp.merge([csp, parsedCsp]);

  // Print CSP
  print(mergedCsp.toSourceString());

  // Throw CspError if the action is invalid
  csp.checkSource(
    type: 'connect',
    uri: Uri.parse('google.com'),
    selfUri: null,
  );
}