Issues

• "Configuration already exists" error

  github/secure_headers#545 · Filter by author owen2345 opened on Feb 5, 2025

• Set default frame-ancestors on default Content-Security-Policy

  github/secure_headers#532 · Filter by author rzhade3 opened on Oct 21, 2024
  2

• content_security_policy_nonce calls Rails method so CSP does not contain nonce

  github/secure_headers#511 · Filter by author jdudley1123 opened on Sep 20, 2023
  2

  

• Set default-src CSP Attribute to none by default

  github/secure_headers#482 · Filter by author rzhade3 opened on Apr 5, 2022 · v7
  1

• Support CSP "double policies"

  github/secure_headers#476 · Filter by author rohansharma opened on Feb 16, 2022

• nonced tag helpers including nonce directive in csp has potential to break applications

  github/secure_headers#470 · Filter by author pcasaretto opened on Mar 23, 2021
  17

• Guide for transitioning from secure_headers to vanilla rails csp

  github/secure_headers#466 · Filter by author oreoshake opened on Feb 12, 2021
  3

• Validation on plugin-types does not allow for the empty directive

  github/secure_headers#448 · Filter by author oreoshake opened on Oct 23, 2020
  1

  

• Confirm feature parity with secure_headers <=> rails vanilla

  github/secure_headers#394 · Filter by author oreoshake opened on Jul 19, 2018
  2