Show HN: A Browser Extension for Testing Content Security Policy (csptool.net)
One of the things I struggled with a lot when doing web development was developing effective CSP directives, so I built a browser extension for Chrome and Firefox to assist in this task.
2 comments
[ 3.4 ms ] story [ 12.3 ms ] threadCSP always feels like one of those things that sounds straightforward in theory, but gets annoying fast once you are trying to make a real app work without punching accidental holes in the policy.
Curious how you approached the feedback loop: does the extension mainly help generate directives, or does it also help explain which current policy rule is actually causing a given breakage?