Umbraco.Community.CSPManager
A comprehensive Content Security Policy (CSP) management package for Umbraco CMS that helps protect your website from XSS attacks and other code injection vulnerabilities. Manage CSP headers for both frontend and backend through an intuitive backoffice interface.
Documentation
Full documentation is available at matthew-wise.github.io/Umbraco-CSP-manager
Features
- Frontend & Backend CSP Management — Configure separate Content Security Policies for your website frontend and Umbraco backoffice
- Intuitive Backoffice Interface — Easy-to-use management screens within the Umbraco backoffice
- Policy Import — Paste an existing CSP header value to import it directly into the backoffice
- CSP Evaluation Tools — Test and validate your Content Security Policies before deployment
- Nonce Support — Built-in tag helpers for script, style, and link nonces
- Flexible Configuration — Customize CSP directives to match your website's requirements
- Notification Events — Extend behaviour with
CspWritingNotification and CspSavedNotification
- uSync Integration — Sync CSP policies across environments using uSync
Installation
dotnet add package Umbraco.Community.CSPManager
uSync Integration
Contributing
Contributions are welcome! Please read our Contributing Guidelines and feel free to submit issues and pull requests.
License
This project is licensed under the MIT License - see the LICENSE file for details.
