zhugesong/csp-viz

Content Security Policy Visualizer

csp-viz's Issues

Add styling to tool page

The page has next to no styling, but could use some to avoid looking utterly bland.

Allow linking to the page with the CSP string pre-populated

This could be via the query string, fragment, or whatever. Would be nice to be able to link to a specific instance of the page and also navigate back/forwards through previous inputs.

Tool page should include warnings when I make assumptions about what the CSP string meant

In the code there are a few places commented as making assumptions; it would be nice to print those out as a visible warning. This issue doesn't mean I will implement a full-blown CSP parser at this point.

Directives that aren't specified in the CSP but still displayed should display the inherited value if it exists

For example, if font-src is not specified explicitly in the CSP, it takes its sources from default-src. The table should show that, or not show that column at all. As it is, the table incorrectly shows that font-src has no sources allowed when it is not specified.

Make CSP input field bigger

When using this tool you are probably dealing with a longer CSP string, and the input field is fairly small. This means there is almost no chance the string will be visible in its entirety, making it annoying to edit.

Tool page should include instructions

Sure, the README has them and I'd like to think it is fairly intuitive, but ideally the page should stand on its own since it has no links anywhere in case you don't already know how to use it.