Document CSP

oveleon · Mar 1, 2024 · e3ceb3e · e3ceb3e
1 parent 5440742
commit e3ceb3e
Show file tree

Hide file tree

Showing 13 changed files with 58 additions and 1 deletion.
diff --git a/README.md b/README.md
@@ -42,6 +42,7 @@
 - [Extend iFrame-Types](docs/EXTEND_IFRAME.md)
 - [Extend Cookie-Types](docs/EXTEND_TYPE.md)
 - [Extended usage](docs/EXTENDED_USAGE.md)
+- [Content Security Policy](docs/CONTENT_SECURITY_POLICY.md)
 
 ### Contributing
 To build JavaScript and CSS files the following commands can be used:

diff --git a/docs/BASICS.md b/docs/BASICS.md
@@ -8,6 +8,7 @@
 - [Extend iFrame-Types](EXTEND_IFRAME.md)
 - [Extend Cookie-Types](EXTEND_TYPE.md)
 - [Extended usage](EXTENDED_USAGE.md)
+- [Content Security Policy](CONTENT_SECURITY_POLICY.md)
 
 ---
 

diff --git a/docs/CONFIGURATION.md b/docs/CONFIGURATION.md
@@ -8,6 +8,7 @@
 - [Extend iFrame-Types](EXTEND_IFRAME.md)
 - [Extend Cookie-Types](EXTEND_TYPE.md)
 - [Extended usage](EXTENDED_USAGE.md)
+- [Content Security Policy](CONTENT_SECURITY_POLICY.md)
 
 ---
 

diff --git a/docs/CONTENT_SECURITY_POLICY.md b/docs/CONTENT_SECURITY_POLICY.md
@@ -0,0 +1,45 @@
+- [Install](INSTALL.md)
+- [Configuration (Basics)](BASICS.md)
+    - [Create Configuration](CONFIGURATION.md)
+    - [Create Group](GROUP.md)
+    - [Create Cookie (Type)](COOKIE.md)
+- [Module / Content-Element / Insert-tags](MOD_CE_MISC.md)
+- [Styling & Customization](CUSTOMIZATION.md)
+- [Extend iFrame-Types](EXTEND_IFRAME.md)
+- [Extend Cookie-Types](EXTEND_TYPE.md)
+- [Extended usage](EXTENDED_USAGE.md)
+- [**Content Security Policy**](CONTENT_SECURITY_POLICY.md)
+
+---
+
+# Content Security Policy
+
+As of `Contao 5.3` and `Contao Cookiebar 2.0`, the Contao Cookiebar also supports the Content-Security-Policy feature.
+
+The cookiebar and scripts that are added by it will get the nonce, however any resources have to be set up by yourself.
+
+## Disclaimer
+
+Issues about your content security policy not working due to misconfiguration will be closed without notice!
+If you are unsure and need help setting it up, you can consider requesting our paid service or finding help on the
+contao community forums.
+
+## What is Content-Security-Policy and how do I enable it?
+
+The following links should help you understand the topic:
+
+- https://content-security-policy.com/
+- https://docs.contao.org/manual/en/site-structure/website-root/#content-security-policy
+- https://docs.contao.org/dev/framework/csp/
+
+## Documentations for Services
+
+| Service                        | URL                                                                                                                                      |
+|--------------------------------|------------------------------------------------------------------------------------------------------------------------------------------|
+| Google Maps                    | https://developers.google.com/maps/documentation/javascript/content-security-policy                                                      |
+| Google Analytics / Tag Manager | https://developers.google.com/tag-platform/security/guides/csp#google_analytics_4_google_analytics                                       |
+| Google Ads conversions         | https://developers.google.com/tag-platform/security/guides/csp#google_ads_conversions                                                    |
+| Meta Pixel / Facebook          | https://developers.facebook.com/docs/meta-pixel/advanced                                                                                 |
+| Matomo                         | https://matomo.org/faq/general/faq_20904/                                                                                                |
+| etracker                       | https://www.etracker.com/docs/integration-setup/tracking-code-sdks/tracking-code-integration/funktion-zweck/#integration-security-header | 
+| iFrame                         | https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-src                                              |
diff --git a/docs/COOKIE.md b/docs/COOKIE.md
@@ -8,6 +8,7 @@
 - [Extend iFrame-Types](EXTEND_IFRAME.md)
 - [Extend Cookie-Types](EXTEND_TYPE.md)
 - [Extended usage](EXTENDED_USAGE.md)
+- [Content Security Policy](CONTENT_SECURITY_POLICY.md)
 
 ---
 

diff --git a/docs/CUSTOMIZATION.md b/docs/CUSTOMIZATION.md
@@ -8,6 +8,7 @@
 - [Extend iFrame-Types](EXTEND_IFRAME.md)
 - [Extend Cookie-Types](EXTEND_TYPE.md)
 - [Extended usage](EXTENDED_USAGE.md)
+- [Content Security Policy](CONTENT_SECURITY_POLICY.md)
 
 ---
 

diff --git a/docs/EXTENDED_USAGE.md b/docs/EXTENDED_USAGE.md
@@ -8,6 +8,7 @@
 - [Extend iFrame-Types](EXTEND_IFRAME.md)
 - [Extend Cookie-Types](EXTEND_TYPE.md)
 - [**Extended usage**](EXTENDED_USAGE.md)
+- [Content Security Policy](CONTENT_SECURITY_POLICY.md)
 
 ---
 

diff --git a/docs/EXTEND_IFRAME.md b/docs/EXTEND_IFRAME.md
@@ -8,6 +8,7 @@
 - [**Extend iFrame-Types**](EXTEND_IFRAME.md)
 - [Extend Cookie-Types](EXTEND_TYPE.md)
 - [Extended usage](EXTENDED_USAGE.md)
+- [Content Security Policy](CONTENT_SECURITY_POLICY.md)
 
 ---
 

diff --git a/docs/EXTEND_TYPE.md b/docs/EXTEND_TYPE.md
@@ -8,6 +8,7 @@
 - [Extend iFrame-Types](EXTEND_IFRAME.md)
 - [**Extend Cookie-Types**](EXTEND_TYPE.md)
 - [Extended usage](EXTENDED_USAGE.md)
+- [Content Security Policy](CONTENT_SECURITY_POLICY.md)
 
 ---
 

diff --git a/docs/GROUP.md b/docs/GROUP.md
@@ -8,6 +8,7 @@
 - [Extend iFrame-Types](EXTEND_IFRAME.md)
 - [Extend Cookie-Types](EXTEND_TYPE.md)
 - [Extended usage](EXTENDED_USAGE.md)
+- [Content Security Policy](CONTENT_SECURITY_POLICY.md)
 
 ---
 

diff --git a/docs/INSTALL.md b/docs/INSTALL.md
@@ -8,6 +8,7 @@
 - [Extend iFrame-Types](EXTEND_IFRAME.md)
 - [Extend Cookie-Types](EXTEND_TYPE.md)
 - [Extended usage](EXTENDED_USAGE.md)
+- [Content Security Policy](CONTENT_SECURITY_POLICY.md)
 
 ---
 

diff --git a/docs/MOD_CE_MISC.md b/docs/MOD_CE_MISC.md
@@ -8,6 +8,7 @@
 - [Extend iFrame-Types](EXTEND_IFRAME.md)
 - [Extend Cookie-Types](EXTEND_TYPE.md)
 - [Extended usage](EXTENDED_USAGE.md)
+- [Content Security Policy](CONTENT_SECURITY_POLICY.md)
 
 ---
 

diff --git a/docs/README.md b/docs/README.md
@@ -8,4 +8,5 @@
 - [Styling & Customization](CUSTOMIZATION.md)
 - [Extend iFrame-Types](EXTEND_IFRAME.md)
 - [Extend Cookie-Types](EXTEND_TYPE.md)
-- [Extended usage](EXTENDED_USAGE.md)
+- [Extended usage](EXTENDED_USAGE.md)
+- [Content Security Policy](CONTENT_SECURITY_POLICY.md)