CSP Toolkit

This project was birthed from Vite Plugin CSP Guard and it actually houses generic CSP logic.

The Goal

This Toolkit package is a stepping stone in order to bring support to other frameworks, bundlers, etc. I'll be writing guides for each major framework and bundler out there.

Installation

Usage

import { CSPPolicy } from "csp-toolkit" // A type to be used for your CSPPolicy object when declaring one

import { CSPKeys } from "csp-toolkit" // Import all typed CSP directives
 
// Import grouped typed CSP directives
import { FetchDirectives, DocumentDirectives, NavigationDirectives, ReportingDirectives, OtherDirectives, DeprecatedDirectives } from "csp-toolkit"

import { mergePolicies } from "csp-toolkit" // A function to merge 2 objects of type CSPPolicy

import { policyToString } from "csp-toolkit" // A function that returns a string from an object of type CSPPolicy

import { generateHash } from "csp-toolkit/node" // Generates a hash from a string, you can specify the algorithm

import { generateNonce } from "csp-toolkit/node" // Generates a nonce for you to use for node.js environments

import { generateNonce } from "csp-toolkit/edge" // Generates a nonce for you to use for edge environments

More docs and functions coming soon!

Express