zaproxy / zaproxy/zaproxy-website
Add CSP
Open
Nobody has claimed this yet.
enhancement
- Dominant language
- HTML
- Stars
- 82
- Forks
- 132
- Avg merge
- 13h 14m
- Merged PRs (30d)
- 37
Description
We're now adding security headers via cloudflare, so we should also add as strict a CSP as we can.
But this will need careful testing ;)
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing how the website's security headers are currently added through Cloudflare. Determine the strictest CSP that is compatible with the site, then test the resulting policy carefully across the website. Done means CSP is added without breaking site functionality.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- html
- Domain
- security, web-dev
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100