Overview #

A package for reading and writing Content Security Policy strings.

Licensed under the Apache License 2.0.

Links #

• Pub package
• Issue tracker
• Create a pull request

Getting started #

1.Add dependency #

In pubspec.yaml:

dependencies:
  csp: ^0.1.1

2.Use #

import 'package:csp/csp.dart';

Future<void> main() async {
  // Construct CSP
  var csp = Csp(
    defaultSrc: [Csp.self, 'google.com'],
  );

  // Parse CSP
  final parsedCsp = Csp.parse('default-src: microsoft.com');

  // Merge CSPs
  final mergedCsp = Csp.merge([csp, parsedCsp]);

  // Print CSP
  print(mergedCsp.toSourceString());

  // Throw CspError if the action is invalid
  csp.checkSource(
    type: 'connect',
    uri: Uri.parse('google.com'),
    selfUri: null,
  );
}