{"id":19294580,"url":"https://github.com/web3-storage/w3link-csp-report-api","last_synced_at":"2025-10-18T09:58:18.472Z","repository":{"id":66220451,"uuid":"581216015","full_name":"web3-storage/w3link-csp-report-api","owner":"web3-storage","description":null,"archived":false,"fork":false,"pushed_at":"2023-01-03T14:28:31.000Z","size":204,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":5,"default_branch":"main","last_synced_at":"2025-01-05T21:10:06.372Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/web3-storage.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-12-22T15:24:15.000Z","updated_at":"2022-12-22T16:07:55.000Z","dependencies_parsed_at":"2023-03-20T20:43:13.834Z","dependency_job_id":null,"html_url":"https://github.com/web3-storage/w3link-csp-report-api","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/web3-storage%2Fw3link-csp-report-api","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/web3-storage%2Fw3link-csp-report-api/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/web3-storage%2Fw3link-csp-report-api/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/web3-storage%2Fw3link-csp-report-api/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/web3-storage","download_url":"https://codeload.github.com/web3-storage/w3link-csp-report-api/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":240397523,"owners_count":19794882,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-09T22:38:46.275Z","updated_at":"2025-10-18T09:58:13.450Z","avatar_url":"https://github.com/web3-storage.png","language":"JavaScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# CSP Report server for w3link\n\nw3link and nftstorage.link use [Content-Security-Policy Headers](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy) to control resources the user agent is allowed to load for a given page. This helps guard against attacks from bad actors.\n\nAdding CSP Headers can have side effects to w3link users who rely on w3link to host their legit websites that now have external HTTP calls blocked. The server \n\n## Getting Started\n\nThe repo contains the infra deployment code and the api implementation.\n\n```\n├── stacks      - sst and aws cdk code to deploy all the things\n└── api         - lambda implementation of the api http gateway\n```\n\nTo work on this codebase **you need**:\n\n- Node.js \u003e= v16 (prod env is node v16)\n- An AWS account with the AWS CLI configured locally\n- Install the deps with `npm i`\n\nDeploy dev services to your aws account and start dev console\n\n```console\nnpm start\n```\n\nSee: https://docs.sst.dev for more info on how things get deployed.\n\n## Deployment \n\nDeployment is managed by [seed.run]. PR's are deployed automatically to `https://\u003cpr#\u003e.csp-report-to.web3.storage`. \n\nThe `main` branch is deployed to https://staging.csp-report-to.web3.storage and staging builds are promoted to prod manually via the UI at https://console.seed.run\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fweb3-storage%2Fw3link-csp-report-api","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fweb3-storage%2Fw3link-csp-report-api","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fweb3-storage%2Fw3link-csp-report-api/lists"}