Libraries & Projects>Libraries

Plug_content_security_policy - Generate CSP headers with support for CSP Level 2 nonces

/phoenix#security#plug#plug_content_security_policy
xtian

xtian

Plug_content_security_policy - Generate CSP headers with support for CSP Level 2 nonces

Hey everyone- I’ve released a new version of my library plug_content_security_policy, which aids in the generation of CSP headers for Plug/Phoenix applications.

Setting a Content Security Policy header for your application helps mitigate the risk of cross-site scripting and malicious asset injection by letting you control what sorts of requests are allowed from a page. See the link above for more info and examples.

Version 0.2 of PlugContentSecurityPolicy adds support for report-only mode, which you can use to test your policy for violations without breaking those requests on your site.

1 comment
/phoenix#security#plug#plug_content_security_policy
9 2081 1

First Post!

erlangtest

erlangtest

Thank you so much for creating and open sourcing this.

  1. Could you please include a small video walkthrough of the setup steps in a demo web app? I am trying to set it up and getting stuck while adding the module to pipeline.

  2. Could you please elaborate if this module also adds the nonces to the script tag? Or does it just generate the nonces and you have to rewrite all the inline scripts to include the generated nonce?

I want all of my inline scripts to have following format

Post #2

Where Next?

View thread on forum (has 1 response!)
phoenix
security
plug
plug_content_security_policy
Home Libraries & Projects>Libraries
/phoenix#security#plug#plug_content_security_policy
9 2083 1
Last post

Popular in Libraries Top

tmbb
Libraries & Projects>Libraries

Mandarin + Forage - An admin tool for phoenix
I’ve been working on two packages (not on hex.pm yet) to build admin interfaces for phoenix apps: bureaucrat - which contains a bunch ...
/phoenix#admin-tools#bureaucrat#forage
74 10457 69
New
oltarasenko
Libraries & Projects>Libraries

Crawly - A high-level web crawling & scraping framework for Elixir
Dear Elixir community, After a year of development, bug fixes, and improvements, we are proudly ready to share the release of Crawly 0.1...
#web-scraping
131 9880 45
New
praveenperera
Libraries & Projects>Libraries

FastRSS - A very quick RSS feed parser
FastRSS Parse RSS feeds very quickly: This is rust NIF built using rustler Uses the RSS rust crate to do the actual RSS parsing Speed...
#rust#rss#serde_rustler#rustler
43 4294 20
New
dbern
Libraries & Projects>Libraries

DateTimeParser - Parse DateTime, NaiveDateTime, Time, or Date from strings
I’m excited to announce that TaxJar has developed and open-sourced DateTimeParser. We developed it because we found a need to parse user ...
#date_time_parser
21 5356 3
New
woylie
Libraries & Projects>Libraries

Flop - Filtering, sorting and pagination for Ecto
Flop is an Elixir library that applies filtering, ordering and pagination parameters to your Ecto queries. offset-based pagination with...
#ecto#sorting#pagination#filtering#flop
92 9442 44
New
alisinabh
Libraries & Projects>Libraries

Jalaali (Shamsi) calendar for elixir (Persian calendar)
Hey everyone i’ve developed a library for Jalaali calendar for elixir which supports converting Gregorian dates to Jalaali and vice vers...
#jalaali
72 8178 39
New
josevalim
Libraries & Projects>Libraries

NimbleParsec - a simple and fast parser combinator for Elixir
Yes, yet another parser combinator library! Most of the parser combinators in the ecosystem are either compile-time, often using AST tra...
#nimbleparsec
159 18262 141
New
tmbb
Libraries & Projects>Libraries

PhoenixWS - Websockets over Phoenix Channels
PhoenixWS - Websockets over Phoenix Channels Source code on Github here: https://github.com/tmbb/phoenix_ws Phoenix channels are a great...
/phoenix#websockets
43 7585 14
New
Qqwy
Libraries & Projects>Libraries

Arrays - Fast and versatile arrays with swappable implementations
While not as prevalent as in imperative languages, arrays (collections with efficient random element access) are still very useful in Eli...
#data-structures#enumerables#enum#arrays
109 4684 14
New
bryanjos
Libraries & Projects>Libraries

ReactRender: Server Side Rendering for React Components
Hi, I wanted share a small library we at Revelry Labs made for rendering react components from the server side. There are instructions fo...
#frontend#react_render
39 7758 19
New

Other popular topics Top

albydarned
Questions & Help>Questions

Erlang and Elixir on Apple Silicon/M1 Chip
Hello all! I am typing this post from my new MacBook Pro with the M1 chip. I’m loving it so far, and will probably use it as my daily dr...
#erlang#troubleshooting
121 24599 65
New
_russellb
Questions & Help>Questions

Web scraping tools
I want to try my hand at web scraping. What tools/libraries do I need to use. I’m hoping to turn this into something professional so don’...
#web-scraping
123 19127 45
New
KronicDeth
Libraries & Projects>Libraries

IntelliJ Elixir - Elixir plugin for JetBrain's IntelliJ Platform
Elixir plugin for JetBrain’s IntelliJ Platform (including Rubymine) This is a plugin that adds support for Elixir to JetBrains IntelliJ...
#intellij
289 35421 110
New
stefanchrobot
Questions & Help>Questions

How to decode a JSON into a struct safely?
What’s the safe way to decode a JSON string into a struct? I want to avoid calling String.to_atom. Jason.decode can give me a map with st...
#structs#json
29 20780 26
New
chensan
Questions & Help>Questions

(Postgrex.Error) ERROR 42804 (datatype_mismatch): column "" cannot be cast automatically to type integer
I have a User schema with a :from_id field set to type :string: defmodule TweetBot.Repo.Migrations.CreateUsers do use Ecto.Migration ...
#ecto
29 13294 4
New
ashish173
Questions & Help>Questions

Difference in between :utc_datetime and :naive_datetime in Ecto
I am using Ecto timestamps with postgres, I can see the timestamps() use the :naive_dateime but for my use case I wanted to store the ti...
#ecto#timestamps
79 27907 15
New
ovidiubadita
Questions & Help>Questions

Elixir for game development
Hey all, I discovered Elixir and I love it. I always wanted to learn a functional programming and I intended to go for Haskell, but afte...
#game
30 23202 25
New
lucidguppy
Questions & Help>Questions

How do I read a file and enumerate its lines
I have a super simple question about elixir - how would I take a file like this foo bar baz and output a new file that enumerates th...
#how-to-question
20 15454 3
New
AstonJ
Learning Resources>Books

Functional Web Development with Elixir, OTP, and Phoenix (Pragprog)
by Lance Halvorsen Elixir and Phoenix are generating tremendous excitement as an unbeatable platform for building modern web application...
#book-functional-web-development-with-elixir-otp-and-phoenix#pragprog
460 27162 124
New
siddhant3030
Questions & Help>Questions

How can I write a raw sql query?
Hi, I have to write a raw query for one of my project. But till now I have used ecto queries and don’t have much experience writing raw ...
/phoenix#ecto
13 19061 20
New
Back to top

Latest Phoenix Threads

Phoenix Forum ❯

Libraries & Projects>Libraries

Libs/Projects Libraries ❯

Latest on Elixir Forum

Elixir Forum ❯

Sponsor Spotlight

EEF

Supporting innovation across the BEAM ecosystem.

Our Sponsors

Dashbit

Build Elixir applications with speed and confidence.

EEF

Supporting innovation across the BEAM ecosystem.

Coders51

We build reliable cloud platforms for business-critical systems.

AppSignal

Catch errors, track performance, monitor hosts and more.

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

WyewWorks

Enabling companies to succeed by building software people love.

Potions

The deployment platform built for Elixir: PaaS ease, VPS control.

Pragmatic Studio

Courses that'll move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

Categories:

Sub Categories:

Forums

Our Sponsors

Dashbit

Build Elixir applications with speed and confidence.

EEF

Supporting innovation across the BEAM ecosystem.

Coders51

We build reliable cloud platforms for business-critical systems.

AppSignal

Catch errors, track performance, monitor hosts and more.

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

WyewWorks

Enabling companies to succeed by building software people love.

Potions

The deployment platform built for Elixir: PaaS ease, VPS control.

Pragmatic Studio

Courses that'll move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

We're in Beta

About us Mission Statement