content-security-policy 开源项目推荐（424 个）

shmilylty /OneForAll

OneForAll是一款功能强大的子域收集工具

github /secure_headers

Manages application of security headers with many safe defaults

TypeError /secure

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

bepsvpt /secure-headers

PHP Secure Headers

paragonie /csp-builder

Build Content-Security-Policy headers from a JSON file (or build them programmatically)

edoardottt /csprecon

Discover new target domains using Content Security Policy

nico3333fr /CSP-useful

Collection of scripts, thoughts about CSP (Content Security Policy)

aidantwoods /SecureHeaders

A PHP library aiming to make the use of browser security features more accessible.

koenbuyens /securityheaders

Check any website (or set of websites) for insecure security headers.

moloch-- /CSP-Bypass

A Burp Plugin for Detecting Weaknesses in Content Security Policies

TerribleDev /HardHat

Help secure .net core apps with various HTTP headers (such as CSP's)

jacobbednarz /go-csp-collector

Self-hosted collector for browser security reports: CSP, NEL, COOP, COEP and other Reporting API reports.

lisonge /Disable-CSP

A browser extension to disable http header Content-Security-Policy and html meta Content-Security-Policy

kindspells /astro-shield

Astro integration to enhance your website's security with SubResource Integrity hashes, Content-Security-Policy headers, and other techniques.

nibtime /next-safe-middleware

Strict CSP (Content-Security-Policy) for Next.js hybrid apps https://web.dev/strict-csp/

wobqqq /oc-fortify-csp-plugin

🛡️ Content-Security-Policy header builder for October CMS

rustcohlnikov /awesome-frontend-security

☔️A curated list of tools, articles & resources to help take your frontend security to the next level. Feel free to contribute!

sebastienrousseau /static-site-generator

A secure-by-default static site generator built in Rust. WCAG 2.2 AA validation, CSP/SRI hardening, native JS/CSS minification, automated CycloneDX SBOM, local LLM content pipeline, WebAssembly target, interactive islands, streaming compilation for 100K+ pages, 28-locale i18n, and one-command deployment.

fabriziosalmi /websites-monitor

Websites monitoring via GitHub Actions/API (expiration, security, performances, privacy, SEO)

dansmaculotte /nuxt-security

Module for Nuxt.js to configure security headers and more