Download and install the plugin using the Extension Manager. Refer to Plugins on how to install plugins manually.

Content Security Policy helps preventing cross-site scripting (XSS) attacks. With the CSP header enabled, Firefox won't execute JavaScript code which is embedded in HTML documents. It also denies loading code from external places which are not authorized by the CSP header.

For further information, visit the following pages:

• https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
• https://content-security-policy.com/

Define your Policy as appropriate via your site's Configuration Manager, under the Cspheader section.

Details for each CSP Directive can be found on MDN Web Docs. A direct link to each Directive's documentation is provided in the config page.

• 2021-01-30
• 2016-02-02
• 2014-01-25
• 2011-06-23

The complete list of releases and change log is available on Github.

• Bump version to 2021-01-30 by dregad (2021-01-30 19:07)
• Fix PHPStorm warnings by dregad (2021-01-30 19:06)
• PHPDoc updates by dregad (2021-01-30 19:06)
• Update README.md by dregad (2021-01-25 19:06)
• Fix URLs by dregad (2021-01-25 18:49)

Full Git log.

Please refer to the plugin's Issue tracker on Github.

Requests for new features and enhancements should be filed on Github.

This plugin's original version was released in 2011 by Matthias Schulte, a.k.a lupo49. His last recorded maintenance activity on the project was in 2016, after which he stopped responding to submitted issues and pull requests.

In January 2021, Damien Regad decided to take over the plugin's maintenance, and integrate the changes he and Andi Gohr had submitted as pull requests.