GeekInTheNorth / GeekInTheNorth/Stott.Security.Optimizely
Feature request: Possibility to run both Report-Only and
Nobody has claimed this yet.
- Dominant language
- C#
- Stars
- 11
- Forks
- 6
- PR merge metrics
- No merged PRs in 30d
Description
Hi
We are in a transition of CSP settings from our side into the Stott.Security plugin.
We were wondering if it is possible to both run the report-only feature alongside the CSP header settings via this plugin so that we may provide the reporting simultaneously as we try to migrate each ruleset to the real deal?
With other words, is it possible to run both headers simultaneously?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files or tests are named. Start by tracing the plugin's CSP configuration and response-header handling, then verify whether Content-Security-Policy and Content-Security-Policy-Report-Only can be emitted together. Done means both headers coexist and report-only reporting remains available during migration.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100