https://github.com/spaze/nonce-generator
Content Security Policy Nonce Generator
https://github.com/spaze/nonce-generator
Last synced: 2 months ago
JSON representation
Content Security Policy Nonce Generator
- Host: GitHub
- URL: https://github.com/spaze/nonce-generator
- Owner: spaze
- License: mit
- Created: 2016-10-03T13:40:37.000Z (over 8 years ago)
- Default Branch: main
- Last Pushed: 2024-10-26T00:16:54.000Z (8 months ago)
- Last Synced: 2025-03-23T16:51:22.640Z (3 months ago)
- Language: PHP
- Size: 36.1 KB
- Stars: 7
- Watchers: 3
- Forks: 0
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Nonce Generator
[](https://github.com/spaze/nonce-generator/actions?query=workflow%3A%22PHP+Tests%22)
This generates random nonces for Content Security Policy *nonce* attributes. These nonces work with CSP3 [`strict-dynamic`](https://w3c.github.io/webappsec-csp/#strict-dynamic-usage) which aims to make Content Security Policy simpler to deploy for existing applications. This package is intended to be used with Nette Framework, [`spaze/csp-config`](https://github.com/spaze/csp-config) and [`spaze/sri-macros`](https://github.com/spaze/sri-macros).
## Usage
This is a *plug and play* generator.
If installed, `\Spaze\ContentSecurityPolicy\Config::addDirective()` from `spaze/csp-config` will automatically add `nonce-...` attribute to configured directives, and [Latte](https://latte.nette.org/) macros `{script ...}` and `{stylesheet ...}` from `spaze/sri-macros` will add `nonce="..."` attribute to `script` and `style` attributes respectively. Also `n:nonce` [shortcut](https://doc.nette.org/en/http/configuration#toc-content-security-policy) will use the same generated value.
## Installation
With [Composer](https://getcomposer.org):
```
composer require spaze/nonce-generator
```
Add the extension to your configuration:
```neon
extensions:
nonceGenerator: Spaze\NonceGenerator\Bridges\Nette\GeneratorExtension
```
## Requirements
- PHP 8.2 or newer
- Latte 3.0 or newer
- Nette Application 3.1 or newer
- Nette DI 3.0 or newer
## API
```
createNonce(): Nonce
```
Generates and returns a `Nonce` object. Use `Nonce::getValue()` to get the generated nonce.