ContentSecurityPolicy
Table of Contents
Namespaces
- Configuration
- Event
- Processing
- Reporting
Interfaces
- CoveringInterface
- Interface to determine whether a value is covered by some other value in the scope of CSP,
e.g. URI `*.example.com` would "cover" URI `https://specific.example.com/path/file.js`
- SourceInterface
- Semantic interface for anything that can be used as "source" in the terms
of Content-Security-Policy - it includes `enum` objects, as well as real
object instances that would be using `SourceValueInterface` instead.
- SourceValueInterface
- Interface used for self-contained source value models.
Classes
- ConsumableNonce
- String wrapper that keeps track of how often the value was consumed.
- HashProxy
- Representation of Content-Security-Policy hash source, acting as proxy on
files and URLs, to be resolved later when resource contents are actually compiled.
- HashValue
- Representation of Content-Security-Policy hash source value
see https://www.w3.org/TR/CSP3/#grammardef-hash-source
- ModelService
- Helpers for working with Content-Security-Policy models.
- Mutation
- Representation of a Content-Security-Policy mutation, changing an existing policy directive.
- MutationCollection
- A collection of mutations (sic!).
- MutationOrigin
- Representation of a mutation origin, to keep track of resolutions
to the Content-Security-Policy and how to revert again later.
- MutationRepository
- MutationSuggestion
- Representation of a mutation suggested by a handler.
- Policy
- Representation of the whole Content-Security-Policy
see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy
- PolicyProvider
- Provide a Content-Security-Policy representation for a given scope (e.g. backend, frontend, frontend.my-site).
- PolicyRegistry
- A shared service registry to hold additional adjustments that were collected during
processing the current request. For instance, it would be used to temporarily(!) allow
a particular CSP URL/aspect.
- RawValue
- Representation of a plain, raw string value that does not have
a particular meaning in the terms of Content-Security-Policy.
- Scope
- Representation of a specific application type scope (backend, frontend),
which can optionally be enriched by site-related details.
- ScopeRepository
- SourceCollection
- A collection of sources (sic!).
- UriValue
- Bridge to UriInterface to be used in Content-Security-Policy models,
which e.g. supports wildcard domains, like `*.typo3.org` or `https://*.typo3.org`.
Enums
- Directive
- Representation of Content-Security-Policy directives
see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy#directives
- Disposition
- Representation of Content-Security-Policy disposition
see https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP#disposition
- HashType
- Representation of Content-Security-Policy hash algorithm type
see https://www.w3.org/TR/CSP3/#grammardef-hash-algorithm
- MutationMode
- The mode used in mutations (sic!).
- MutationOriginType
- SourceKeyword
- Representation of Content-Security-Policy source keywords
see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/Sources#sources
- SourceScheme
- Representation of Content-Security-Policy source schemes
see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/Sources#sources
