Skip to content

v0.4.0 — Multi-header CSP, nonce status, packaging & CI

Choose a tag to compare

View all tags
@sampsonc sampsonc released this 27 Mar 20:46
· 43 commits to main since this release
v0.4.0
a10543e

Highlights

  • Multiple CSP headers: Responses with several Content-Security-Policy or Report-Only fields are parsed as separate policies (fetcher uses get_list).
  • Nonce reuse probe: NonceReuseStatus (ANALYZED, NO_NONCE, FETCH_FAILED) so unreachable hosts and CSP-without-nonce are distinct from static-nonce findings. detect_nonce_reuse always returns NonceReuseResult; __bool__ matches legacy truthiness.
  • Packaging: py.typed, __version__ from package metadata, Chrome extension manifest aligned to 0.4.0.
  • CI: coverage floor (--cov-fail-under=75), Ruff format check on src/ and tests/.

Install

pip install csp-toolkit==0.4.0

See PyPI.

Assets 2
Loading