Search results

Incorrect hashes generated causing CSP violations

Status: Open.

#126 In slackhq/csp-html-webpack-plugin;

· warnyul opened on Nov 29, 2024

Double encodes html entities (&,  , etc)

Status: Open.

#125 In slackhq/csp-html-webpack-plugin;

· eamodio opened on Oct 16, 2024

Is this plugin still maintained?

Status: Open.

#124 In slackhq/csp-html-webpack-plugin;

· ttencate opened on Sep 3, 2024

Doctype is mutilated

Status: Open.

#123 In slackhq/csp-html-webpack-plugin;

· ttencate opened on Sep 3, 2024

Nonce seems to be static - recommanded conf is dangerous for static website generators

Status: Open.

#121 In slackhq/csp-html-webpack-plugin;

· quadristan opened on Mar 22, 2024

Wrong inline script hash when the file EOL is CRLF

Status: Open.

#111 In slackhq/csp-html-webpack-plugin;

· chihiroxc opened on Aug 15, 2022

No nonce values are showing up in the CSP string

Status: Open.

#107 In slackhq/csp-html-webpack-plugin;

· tupton opened on May 24, 2022

Angular 8+ ready

Status: Open.

#105 In slackhq/csp-html-webpack-plugin;

· pahlers opened on Jan 13, 2022

Allow nonceEnabled to take a single boolean value

Status: Open.

#98 In slackhq/csp-html-webpack-plugin;

· StephanBijzitter opened on Jul 31, 2021

Add nonce also for preloaded scripts

Status: In Review

Status: Open.

#84 In slackhq/csp-html-webpack-plugin;

· jukben opened on Feb 10, 2021

[Security] Nonce reuse

Status: Open.

#82 In slackhq/csp-html-webpack-plugin;

· lweichselbaum opened on Jan 27, 2021

Add hashes to external scripts (CSP3)

Status: In Development

Status: In Review

Status: Open.

#50 In slackhq/csp-html-webpack-plugin;

· Kage-Yami opened on Dec 30, 2019