Search results

helmet

help secure Express/Connect apps with various HTTP headers

• express
• security
• headers
• backend
• content-security-policy
• cross-origin-embedder-policy
• cross-origin-opener-policy
• cross-origin-resource-policy
• origin-agent-cluster
• referrer-policy
• strict-transport-security
• x-content-type-options
• x-dns-prefetch-control
• x-download-options
• View more

evanhahn

• 8.0.0 • 2 months ago • 5,445 dependents • MITpublished version 8.0.0, 2 months ago5445 dependents licensed under $MIT

csp_evaluator

Evaluate Content Security Policies for a wide range of bypasses and weaknesses

• csp
• content security policy
• content-security-policy
• csp-evaluator

google-wombot

• 1.1.2 • 5 months ago • 8 dependents • Apache-2.0published version 1.1.2, 5 months ago8 dependents licensed under $Apache-2.0

helmet-csp

Content Security Policy middleware

• express
• security
• content-security-policy
• csp
• xss

evanhahn

• 4.0.0 • 6 months ago • 50 dependents • MITpublished version 4.0.0, 6 months ago50 dependents licensed under $MIT

nuxt-security

🛡️ Security Module for Nuxt based on HTTP Headers and Middleware

• nuxt
• vue
• security
• owasp
• helmet
• basic-auth
• rate-limit
• xss
• cors
• request-size-limit
• allowed-http-methods
• csrf
• content-security-policy

vejja

• 2.1.5 • 3 days ago • 7 dependents • MITpublished version 2.1.5, 3 days ago7 dependents licensed under $MIT

csp-header

Content-Security-Policy header generator

• csp
• content-security-policy
• security
• policy

frux

• 6.0.0 • 18 days ago • 12 dependents • WTFPLpublished version 6.0.0, 18 days ago12 dependents licensed under $WTFPL

express-csp-header

Content-Security-Policy middleware for Express

• csp
• content-security-policy
• express

frux

• 6.0.0 • 18 days ago • 10 dependents • WTFPLpublished version 6.0.0, 18 days ago10 dependents licensed under $WTFPL

csp-typed-directives

Provides type information for all CSP directives and related headers' directives; as well as a basic utility funtion that helps convert the typed properties to the header content's policy string.

• CSP
• CSPs
• content-security-policy
• header
• security
• generate
• directive
• types
• typescript

joshhemphill

• 1.1.10 • 2 years ago • 2 dependents • MITpublished version 1.1.10, 2 years ago2 dependents licensed under $MIT

@next-safe/middleware

Strict Content-Security-Policy (CSP) for Next.js with composable middleware

• nextjs
• security
• content-security-policy
• strict-csp
• strict-dynamic
• report-uri
• report-to
• reporting-api
• middleware
• chain
• compose

nibtime

• 0.10.0 • 2 years ago • 0 dependents • MITpublished version 0.10.0, 2 years ago0 dependents licensed under $MIT

gatsby-plugin-csp

Adds Content Security Policy to your Gatsby app.

• gatsby
• gatsby-plugin
• csp
• content-security-policy

thomkrupa

• 1.1.4 • 2 years ago • 5 dependents • MITpublished version 1.1.4, 2 years ago5 dependents licensed under $MIT

strict-csp

Enables a hash-based strict Content Security Policy for static HTML files and single page applications.

• csp
• content-security-policy
• security

lweichselbaum

• 1.0.4 • 3 years ago • 1 dependents • Apache-2.0published version 1.0.4, 3 years ago1 dependents licensed under $Apache-2.0

strict-csp-html-webpack-plugin

A webpack plugin that adds a hash-based strict CSP to help protect your site against XSS attacks.

• csp
• content-security-policy
• security

lweichselbaum

• 1.0.2 • 3 years ago • 0 dependents • Apache-2.0published version 1.0.2, 3 years ago0 dependents licensed under $Apache-2.0

content-security-policy

Middleware to add Content-Security-Policy header.

• express
• connect
• content-security-policy
• security
• csp

samuelerdtman

• 0.3.4 • 4 years ago • 3 dependentspublished version 0.3.4, 4 years ago3 dependents

csp-dev

Spec compliant content security policy builder and parser. 🚨

• content-security-policy
• csp-parser
• csp-builder
• csp

muratgozel

• 1.0.2 • 3 years ago • 1 dependents • MITpublished version 1.0.2, 3 years ago1 dependents licensed under $MIT

property-expr-csp

tiny util for getting and setting deep object props safely

• expr
• expression
• setter
• getter
• deep
• property
• content-security-policy
• csp
• content
• security
• policy
• accessor

enet

• 1.4.0 • 6 years ago • 0 dependents • MITpublished version 1.4.0, 6 years ago0 dependents licensed under $MIT

vite-plugin-csp-guard

A Vite plugin that lets SPA applications generate a Content Security Policy (CSP).

• frontend
• csp
• security
• content-security-policy
• plugin
• vite
• hash

tsotrocki

• 1.1.3 • 2 months ago • 0 dependents • GPL-3.0-onlypublished version 1.1.3, 2 months ago0 dependents licensed under $GPL-3.0-only

@kindspells/astro-shield

Astro integration to enhance your website's security with SubResource Integrity hashes, Content-Security-Policy headers, and other techniques.

• astro
• astro-component
• astro-integration
• code-generation
• csp
• content-security-policy
• security
• sri
• subresource-integrity
• withastro

castarco

• 1.7.1 • a month ago • 0 dependents • MITpublished version 1.7.1, a month ago0 dependents licensed under $MIT

gatsby-plugin-csp-nonce

Generate fixed nonces for scripts in Gatsby and make them available for the headers.

• gatsby
• gatsby-plugin
• csp
• nonce
• content-security-policy

oscin

• 1.2.0 • 3 years ago • 0 dependents • MITpublished version 1.2.0, 3 years ago0 dependents licensed under $MIT

@jackdbd/content-security-policy

Write your Content-Security-Policy header in JavaScript, so you can have validation and automatic hashes.

• content-security-policy
• csp
• csp-directives
• http
• http-header
• security
• xss

jackdbd

• 3.0.0 • 7 months ago • 1 dependents • MITpublished version 3.0.0, 7 months ago1 dependents licensed under $MIT

csp-builder

A builder tool to help generate Content Security Policies in a type-safe way

• content-security-policy
• csp
• builder
• generator
• web
• security

pgilad

• 1.1.1 • 4 years ago • 0 dependents • MITpublished version 1.1.1, 4 years ago0 dependents licensed under $MIT

@kawaz/create-worker

Create Web Workers from inline functions without requiring separate worker files.

• worker
• createWorker
• csp
• content-security-policy

kawaz

• 1.3.8 • 25 days ago • 0 dependents • MITpublished version 1.3.8, 25 days ago0 dependents licensed under $MIT