CSP for Me
Adds/Removes directive or directive-value to/from the existing CSP(content-security-policy) header in HTTP response. Works on Android as well as on PC. HTTPレスポンスの既存のCSPヘッダにディレクティブあるいはディレクティブ値を追加／削除する拡張機能。Androidでも機能します
What is CSP for Me?
CSP for Me is a Firefox add-on that adds or removes directive-values from the existing CSP (content-security-policy) header in HTTP responses. It works on both Android and PC platforms. The add-on provides features like enabling at startup, printing debug info, controlling cache-control header, specifying applied URLs and policy, and more.
Stats
- webRequest
- webRequestBlocking
- storage
- <all_urls>
Other platforms
ChromeStats Rank
Summary
Adds/Removes directive or directive-value to the existing CSP(content-security-policy) header in HTTP response. Works on Android as well as on PC.
Usage See the screenshot.
- Enable at startup: Enable this feature when the browser is started.
- Print debug info: Output debug information at the bottom of the Options tab.
- no-cache: Controls the Cache-Control header so that CSP-modified pages are not cached.
- Applied URLs: Comma-Separated target URL patterns.
- Applied Policy: CSP directives to add or remove.
Add: Follow the CSP syntax.
e.g.
script-src 'unsafe-inline' https://yobukodori.github.ioRemove: 'remove':<value> or <regular expression> or 'directive' e.g.
script-src 'remove':https://www.google-analytics.com 'remove':/^'(nonce|sha256|sha384|sha512)-/; report-uri 'remove':'directive'Adds new value to end of existing value if same directive name exists. Adds new directive to end of header value if same directive name not exists. Does nothing if CSP header doesn't exist in response.
- Save: Save and apply settings.
- Apply: Apply settings. (doesn't save settings).
- Get Status: get current status and applied settings.
- On enables this feature. Off disables this feature. Or clicking lock icon in toolbar will bring up a pop-up menu where you can turn it on/off and open the settings page.
- Clear Log: Clear log.
Safety
Risk impact
CSP for Me is risky to use as it requires a number of sensitive permissions that can potentially harm your browser and steal your data. Exercise caution when installing this add-on. Review carefully before installing. We recommend that you only install CSP for Me if you trust the publisher.
Risk likelihood
CSP for Me is probably trust-worthy. Prefer other publishers if available. Exercise caution when installing this add-on.
Screenshots