FeatureFuel
3

Allow CSP Rules to be modified in Directus Cloud Config

Source: directus/directus#25552 · opened by @blowsie
Summary Currently the directus cloud config only allows limited customisation of the Directus Environment Variables. It would be great if it could also allow for customisation of the CSP Environment variables Basic Example CONTENT_SECURITY_POLICY_DIRECTIVESFRAME_SRC: your-website-url Motivation The current frame-src configuration ( does not allow ports other than 443, which is problematic for development since 443 requires sudo and is not reccomended for development use. Detailed Design Extend the current Environment variable configuration to allow for more Environment Variables to be conifgured. Requirements List Must Have: • CONTENT_SECURITY_POLICY_DIRECTIVESFRAME_SRC Should Have: Could Have: • Other CSP configs CONTENT_SECURITY_POLICY_DIRECTIVES* Won't Have: Drawbacks Could weaken CSP security if not used correctly Alternatives n/a Adoption Strategy They simply add the values to the config page Unresolved Questions _No res…

No pledges yet. Be the first to back this.

Make a pledge

Pledge your monetary support if this feature is added.

$

Comments

No comments yet.

Replying to

Add a comment

What do you think about this feature request?


Similar requests