Adds opctim/symfony-csp-bundle (#1610)

* Adds opctim/symfony-csp-bundle * Adds newline * Dummy commit * Dummy commit * Dummy commit * Updates README url * Updates config template * Adds version 1.1 * Changes ~ to null * Dummy commit * Adds routeParams config * Dummy commit * Removes 1.0 * Renames routeParams to route_params * Comments out alias * Removes anchor / alias --------- Co-authored-by: Tim Nelles <[email protected]>
symfony · Apr 27, 2024 · d51ff09 · d51ff09
1 parent 8f56f2c
commit d51ff09
Show file tree

Hide file tree

Showing 2 changed files with 45 additions and 0 deletions.
diff --git a/opctim/symfony-csp-bundle/1.1/config/packages/opctim_csp_bundle.yaml b/opctim/symfony-csp-bundle/1.1/config/packages/opctim_csp_bundle.yaml
@@ -0,0 +1,37 @@
+opctim_csp_bundle:
+    # See https://github.com/opctim/symfony-csp-bundle?tab=readme-ov-file#the-always_add-option
+    always_add: []
+
+    # See https://github.com/opctim/symfony-csp-bundle?tab=readme-ov-file#the-report-option
+    report:
+        url: null
+        route: null
+        route_params: []
+        chance: 100
+
+    # https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+    # See https://github.com/opctim/symfony-csp-bundle?tab=readme-ov-file#configuration
+    directives:
+        default-src:
+            - "'self'"
+            - 'data:'
+            - 'https:'
+        base-uri:
+            - "'self'"
+        object-src:
+            - "'none'"
+        script-src:
+            - "'self'"
+        img-src:
+            - "'self'"
+        style-src:
+            - "'self'"
+            - "'unsafe-inline'"
+
+# For different set-ups in the dev environment
+when@dev:
+    opctim_csp_bundle:
+        # always_add: []
+
+        directives:
+            # Add your directive overrides here
diff --git a/opctim/symfony-csp-bundle/1.1/manifest.json b/opctim/symfony-csp-bundle/1.1/manifest.json
@@ -0,0 +1,8 @@
+{
+    "copy-from-recipe": {
+        "config/": "%CONFIG_DIR%/"
+    },
+    "bundles": {
+        "Opctim\\CspBundle\\OpctimCspBundle": ["all"]
+    }
+}