Csp Utilities

yireo/magento2-csp-utilities

Provides CSP (Content Security Policy) utilities for other modules, including nonce and hash generation. Helps improve website security by managing CSP directives.

Installs cleanlyBuild passingTrusted vendorSemVer violations (0% compliant)

Supported Magento versions: 2.4.9

807,484 installs★ 3 starsLatest: v1.0.1Released 2025-03-10License: OSL-3.0

composer require yireo/magento2-csp-utilities

README

Reproduced from the package’s own README, under its own license, as of 2026-09-13. Links and images point back at the source repository.

Magento 2 module CSP Utilities

Magento version PHP version License Latest Version

This Magento 2 module offers CSP utilities for other modules, including various Yireo extensions.

Installation

Installation is usually done via other modules, but if you wanted to separately install this, here you go:

composer require yireo/magento2-csp-utilities
bin/magento module:enable Yireo_CspUtilities

Configuration

  • Inline Script Mode
    • nonce: Generate CSP nonces for Yireo extensions. This is the default, but it is currently not as secure in Magento, if the HTML is cached;
    • hash: Generate CSP hashes for Yireo extensions. This is more secure. However, with this option, your HTTP headers could grow, which could lead into webserver limits;

Current status

Static Tests Unit Tests Integration Tests Playwright DI Compilation

← All packages from yireo