academe / csp Goto Github PK

A list of policies and directives for Facebook, Twitter, Google and other social networking and remote tools (e.g. webfonts) would be very handy. It could be used as a checklist for easy selection in an application admin section.

Lots of objects being created when a policy string is being parsed. How can this be solved for a small library like this? Is there some kind of micro resource-locator, perhaps, that can be used inside the library, but allow an external user (application, library, whatever - userland code) to inject its own overrides when necessary. All in a simple and intuitive way, of course.

Make it an object rather than an array. It will be easier to manipulate the object, handle exceptions, validate, etc.

Sources are just one type of value attached to a direction. There are also URIs, directive-specific tokens, media types, and option tokens. Perhaps, for example, move Source\Host to Value\SourceHost then we can include Value\Uri, Value\MediaType, Value\Option etc.