Skip to content

Latest commit

 

History

History
23 lines (13 loc) · 874 Bytes

config.md

File metadata and controls

23 lines (13 loc) · 874 Bytes

Module Configuration

Go to Stores / Configuration / Security / CSP:

General

Enable/disable module's functionality.

Cron

Enable/disable cron task to process violations reports. This task starts every hour, analyzes reports and creates policy rules. Processed reports will be deleted.

Reports

  • Developers Only: true - CSP violation reports will be collected from given IP addresses (see below); false - CSP violation reports will be collected from any IP address.
  • Developers IPs: comma-separated list of IP addresses to collect CSP violation reports from.

Rules

  • Activate New Rules: true - cron task creates new rules and enables it; false - creates only (enable manually using SQL).
  • Report Only: use Content-Security-Policy-Report-Only or Content-Security-Policy HTTP header for policy.