SAP / ui5-server / 65 / 1

94%

main: 93%

push

travis-ci

[FEATURE] Add CSP middleware (#3)

Adds a Content Security Policy (CSP) middleware which can be enabled via URL parameter (sap-ui-xx-csp-policy). One can set the value to a policy string directly, or use one of the already defined policy IDs (sap-target-level-1, sap-target-level-2).

The OpenUI5 QUnit test "[sap/ui/core/qunit/csp/ContentSecurityPolicy.qunit.html](https://github.com/SAP/openui5/blob/master/src/sap.ui.core/test/sap/ui/core/qunit/csp/ContentSecurityPolicy.qunit.html)" can be used for a starting point validating for CSP compliance.

69 of 115 branches covered (60.0%)

Branch coverage included in aggregate %.

221 of 286 relevant lines covered (77.27%)

3.46 hits per line