happyDomain/checker-http
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
0 releases 1 tag
  • v0.1.0 603e93355b

    Deepen CSP, Permissions-Policy and cookie audits

    nemunaire released this 2026-04-28 11:43:07 +00:00 | 2 commits to master since this release

    Detect CSP weaknesses individually (unsafe-inline, unsafe-eval, missing
    default-src/script-src, permissive sources on script-src or its
    default-src fallback) instead of a single catch-all "unsafe" code, and
    honour CSP3 fetch-directive fallback via EffectiveSources/WildcardSource
    helpers. Validate Permissions-Policy values: warn when a powerful
    feature (camera, microphone, geolocation, payment, sensors, …) is
    granted to all origins. Add a SameSite aggregate state on cookie audits
    so callers get the global ratio alongside per-cookie diagnostics.

    Downloads