content-security-policy-parser

Parse Content Security Policy directives.

Usage no npm install needed!

<script type="module">
  import contentSecurityPolicyParser from 'https://cdn.skypack.dev/content-security-policy-parser';
</script>

README

Content Security Policy parser

Build Status

Take a Content Security Policy string and parse it.

Usage:

const parse = require("content-security-policy-parser");

parse(
  "default-src 'self'; script-src 'unsafe-eval' scripts.com; object-src; style-src styles.biz"
);
/*
{
  'default-src': ["'self'"],
  'script-src': ["'unsafe-eval'", 'scripts.com'],
  'object-src': [],
  'style-src': ['styles.biz']
}
*/

This module is considered "complete". I expect to continue maintenance if needed, but I don't plan to add features or make breaking changes.