Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
- Implement Policy Alter event in other modules updated 27 Feb 2024 at 03:04 UTC
- Consistent default active tab on the CSP settings form updated 27 Feb 2024 at 02:24 UTC
- Generate and cache library info on hook_rebuild updated 23 Apr 2024 at 12:53 UTC
- Change handling 'none' with additional sources updated 2 Feb 2024 at 02:09 UTC
- Throw deprecation warning if directive contains 'none' and other values updated 14 Jan 2024 at 09:09 UTC
- Preserve 'report-sample' if directive contains 'none' updated 12 Jan 2024 at 09:49 UTC
- Update csp.admin.js to ES6 updated 12 Jan 2024 at 09:14 UTC
- Firefox bug fix doesn't detect hashes properly updated 12 Jan 2024 at 09:04 UTC
- Hundreds of log entries: Uninitialized string offset: 0 updated 7 Jan 2024 at 09:04 UTC
- Add hook_csp_policy_alter for themes updated 6 Jan 2024 at 09:49 UTC
- drupalSettings.csp.nonce is missing updated 6 Jan 2024 at 09:49 UTC
- Cleanup support for old versions of core updated 27 Dec 2023 at 10:19 UTC
- Cleanup use of MASTER_REQUEST updated 27 Dec 2023 at 10:14 UTC
- Drop support for Drupal 9 updated 27 Dec 2023 at 10:14 UTC
- Cleanup use of deprecated watchdog_exception updated 27 Dec 2023 at 10:14 UTC
- CKEditor5 requires style-src 'unsafe-inline' updated 27 Dec 2023 at 08:19 UTC
- Remove code to disable inline anti-flicker js updated 23 Dec 2023 at 13:24 UTC
- Configure Gitlab CI updated 23 Dec 2023 at 09:14 UTC
- Error when there are installed modules with invalid library definitions updated 22 Dec 2023 at 08:19 UTC
- Add a reference to csp_log in documentation updated 19 Dec 2023 at 07:19 UTC
- Expose nonce for javascript libraries updated 30 Nov 2023 at 09:24 UTC
- Add nonce service updated 11 Oct 2023 at 03:54 UTC
- PHP warning if adding multiple sources in string with extra spaces updated 12 Aug 2023 at 20:44 UTC
- PHP warning if library asset provided by route is tagged as external updated 12 Aug 2023 at 20:09 UTC
- Ability to disable a boolean directive in config updated 17 Jul 2023 at 20:19 UTC
- Disable toolbar anti-flicker inline JS updated 9 Jul 2023 at 04:59 UTC
- PHP 8.2 - dynamic property creation is deprecated updated 9 Jul 2023 at 04:24 UTC
- Add support for GET Ajax requests updated 22 Apr 2023 at 04:19 UTC
- Update csp_extras to backport add_css from core 10.1 updated 22 Apr 2023 at 04:14 UTC
- Automated Drupal 10 compatibility fixes updated 2 Jan 2023 at 08:34 UTC
- Limit unsafe exception for drupal.ajax JS in Drupal >=9.5 updated 7 Dec 2022 at 02:09 UTC
- New script-src option: wasm-unsafe-eval updated 8 Nov 2022 at 06:24 UTC
- WebRTC directive updated 8 Nov 2022 at 05:59 UTC
- Cleanup IE support updated 7 Nov 2022 at 18:14 UTC
- navigate-to was removed from spec updated 6 Nov 2022 at 09:29 UTC
- Use file_url_generator service updated 6 Nov 2022 at 08:59 UTC
- Update argument order when calling EventDispatcher::dispatch() updated 2 Feb 2023 at 20:46 UTC
- Add download options for sandbox directive updated 20 Jun 2022 at 23:29 UTC
- Behaviors will not load after AJAX call when using CSP Extras updated 19 Jan 2022 at 20:29 UTC
- Remove plugin-types directive from configuration form updated 19 Jan 2022 at 19:44 UTC
- Don't remove sources with a port number if directive has matching protocol directive updated 19 Jan 2022 at 18:24 UTC
- Report to site log should only be available for enabled types updated 18 Jan 2022 at 22:49 UTC
- Set object-src 'none' in default policies updated 29 Nov 2021 at 21:34 UTC
- Optimize policy: protocols updated 19 Sep 2021 at 11:44 UTC
- Remove extra sources for style-src-attr and script-src-attr updated 19 Sep 2021 at 11:39 UTC
- Optimize policy source list updated 19 Sep 2021 at 11:39 UTC
- Provide support for capacitor iOS url updated 21 May 2021 at 18:24 UTC
- Allow wildcard for port updated 26 Apr 2021 at 19:49 UTC
- Allow localhost as host source in config form updated 26 Apr 2021 at 19:34 UTC
- Add warning of plugin-types deprecation updated 1 Apr 2021 at 08:09 UTC