Source evidence

Could be better

CSP Friendly Security · review · 2022-09-08T04:03:00+00:00

CSP Friendly Security plugin evidence original source source API

mixedsentiment

mediumseverity

0.63relevance

0replies

Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

5 / 19 rows with source links

26.3% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

14 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

review · 3 stars

anonymized-20439159 unresolved

The plugin works as advertised however, it does not let you modify the CSP header resulting in a less than ideal CSP header. The header this plugin serves provides no protection against clickjacking and allows all external scripts. This topic was modified 3 years, 8 months ago by anonymized-20439159 .

Commercial Context

Opportunity

trust and abuse-prevention operations

Security Headers abuse-prevention assurance for keeping sites trusted, protected, and recoverable

Buyer: site owners, agencies, and maintenance teams

Wedge: test security headers lockouts, bot/spam defenses, risky access changes, and incident alerts

Proof Blocked card complete market

Analysis

heuristic-v1

Summary: Could be better: users praise reliable, which suggests what competitors already do well.

Evidence quote: Could be better The plugin works as advertised however, it does not let you modify the CSP header resulting in a less than ideal CSP header.

Affected feature: reliable

reliable

Plugin

API

CSP Friendly Security

200 active installs · 3.2K downloads · rating 70.0

content security policy csp nonces security headers sha256 hashes

Comments

0 shown

No comments were stored for this source.