Search results

Allow URL/path exceptions for Content Security Policy (CSP)

Status: Open.

#391 In nelmio/NelmioSecurityBundle;

· sdespont opened on Jul 4, 2026

Nonce not possible to use

Status: Open.

#365 In nelmio/NelmioSecurityBundle;

· Mecanik opened on Dec 4, 2024

Can't seem to enable/disable CSP with environment variable

Status: Open.

Feature

#362 In nelmio/NelmioSecurityBundle;

· pauljura opened on Nov 13, 2024

Evaluate/updatePolicyManager

Status: Open.

#358 In nelmio/NelmioSecurityBundle;

· martijnc opened on Jul 8, 2024

Unexpecting appearance of unsafe-inline on CSP

Status: Open.

#346 In nelmio/NelmioSecurityBundle;

· spyridonas opened on May 29, 2024

Service dependency injection for controller action: Getting CSP nonce in controller

Status: Open.

#345 In nelmio/NelmioSecurityBundle;

· Adambean opened on May 18, 2024

CSP interferes with var-dumper

Status: Open.

#339 In nelmio/NelmioSecurityBundle;

· pauljura opened on Mar 5, 2024

When script-src is set to strict-dynamic, 2 nonces are listed in CSP header

Status: Open.

#336 In nelmio/NelmioSecurityBundle;

· eliseeman opened on Feb 20, 2024

DirectiveSet::canNotBeFallbackedByDefault(): Argument #2 ($value) must be of type string, bool given

Status: Open.

#325 In nelmio/NelmioSecurityBundle;

· bartosz-zolynski opened on Jul 6, 2023

Update the default hashing algorithm used in signed cookies

Status: Open.

#324 In nelmio/NelmioSecurityBundle;

· javiereguiluz opened on Apr 27, 2023

Reusing nonce for Turbo Drive integration

Status: Open.

#321 In nelmio/NelmioSecurityBundle;

· florimondmanca opened on Feb 13, 2023

Issue with CSP config

Status: Open.

#317 In nelmio/NelmioSecurityBundle;

· yellow1912 opened on Oct 4, 2022