umputun / remark42
85%
master: 85%

LAST BUILD BRANCH: paskal/remove-deprecated-func
DEFAULT BRANCH: master
Repo Added
Token eqCnozHBf54UGZ8kokrZbOvkEkhZY23aj regen
Build 1467 Last
Files 49
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH paskal/csp
branch: paskal/csp
CHANGE BRANCH
x
Sync Branches

coverage: 84.9% (+0.05%) from 84.851%
10274368759

Pull #1805

github

paskal 
Add Content-Security-Policy and Permissions-Policy headers

`Content-Security-Policy` now restricts resource loading and execution
to enhance security:
  - `default-src 'none'`: Disallow all resource loading by default.
  - `base-uri 'none'`: Prevents the use of `<base>` tag to change the
  base URL for relative URLs.
  - `form-action 'none'`: Disallows form submissions.
  - `connect-src 'self'`: Restricts the origins that can be connected to
   (via XHR, WebSockets, etc.) to the same origin.
  - `frame-src 'self'`: Restricts the origins that can be embedded using
   `<frame>` and `<iframe>` to the same origin (for `/web/` demo
    endpoint).
  - `frame-ancestors %s;`: Specifies the origins that are allowed to
  embed this content in a frame. If no specific origins are allowed, it
  defaults to `*` (any origin). This enhances security by controlling
  which sites can embed your content.
  - `img-src 'self'`: Allows images to be loaded only from the same
  origin. If `imageProxyEnabled` is true, allows images from any origin
  (`*`).
  - `script-src 'self' 'unsafe-inline'`: Allows scripts to be loaded and
   executed only from the same origin and allows inline scripts.
  - `style-src 'self' 'unsafe-inline'`: Allows styles to be loaded and
  applied only from the same origin and allows inline styles.
  - `font-src data:`: Allows fonts to be loaded from data URIs.
  - `object-src 'none'`: Disallows the use of `<object>`, `<embed>`, and
   `<applet>` tags.

`Permissions-Policy` now restricts the use of certain browser features
which we don't use to enhance user privacy and security:
  - `accelerometer=()`: Disables the use of the accelerometer sensor.
  - `autoplay=()`: Disables automatic playback of media.
  - `camera=()`: Disables the use of the camera.
  - `cross-origin-isolated=()`: Disallows the page from being treated as
   cross-origin isolated.
  - `display-capture=()`: Disables the ability to capture the display.
  - `encrypted-media=()`: Disable... (continued)
Pull Request #1805: Add Content-Security-Policy and Permissions-Policy headers

15 of 16 new or added lines in 2 files covered. (93.75%)

1 existing line in 1 file now uncovered.

5988 of 7053 relevant lines covered (84.9%)

33.39 hits per line

Relevant lines Covered
7053 RELEVANT LINES 5988 COVERED LINES
33.39 HITS PER LINE
Source Files on paskal/csp

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
10274368759 paskal/csp Add Content-Security-Policy and Permissions-Policy headers `Content-Security-Policy` now restricts resource loading and execution to enhance security: - `default-src 'none'`: Disallow all resource loading by default. - `base-uri 'none'`: Prev... Pull #1805 paskal github
84.9
10239808622 paskal/csp Add Content-Security-Policy and Permissions-Policy headers `Content-Security-Policy` now restricts resource loading and execution to enhance security: - `default-src 'none'`: Disallow all resource loading by default. - `base-uri 'none'`: Prev... Pull #1805 paskal github
84.9
10239784417 paskal/csp Add Content-Security-Policy and Permissions-Policy headers `Content-Security-Policy` now restricts resource loading and execution to enhance security: - `default-src 'none'`: Disallow all resource loading by default. - `base-uri 'none'`: Prev... Pull #1805 paskal github
84.9
10239559906 paskal/csp Add Content-Security-Policy and Permissions-Policy headers `Content-Security-Policy` now restricts resource loading and execution to enhance security: - `default-src 'none'`: Disallow all resource loading by default. - `base-uri 'none'`: Prev... Pull #1805 paskal github
84.88
See All Builds (1443)