Decoupled web security implementations for Clojure.
Provide web security implementations decoupled from any of http abstractions like ring, pedestal etc.
Functions implementing CSP:
- csp/header-name returns normal or report-only name of the CSP header.
- csp/header-value-fn builds function for CSP header value from policy map, supports dynamic nonce substitution.
- csp/requires-nonce? tests if result of the
header-value-fnrequires nonce argument - csp/find-directive return policy directive value from the policy map
- csp/random-nonce-fn returns function to generate nonce values to be used in HTTP response.
Functions for the Strict-Transport-Security response header:
Functions for the Referrer-Policy response header:
Authored by Sergey Trofimov.
