{"_id":"@doyensec/csp-evaluator","_rev":"4-83b633d421e7c140793507c93b823cdf","name":"@doyensec/csp-evaluator","dist-tags":{"latest":"1.0.3"},"versions":{"1.0.0":{"name":"@doyensec/csp-evaluator","version":"1.0.0","description":"npm porting of the Google CSP evaluator library","main":"csp_evaluator.js","repository":{"type":"git","url":"git+https://github.com/google/csp-evaluator.git"},"author":{"name":"info@doyensec.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/google/csp-evaluator/issues"},"homepage":"https://github.com/doyensec/electronegativity#readme","keywords":["csp","security"],"dependencies":{"goog":"^0.2.1"},"_id":"@doyensec/csp-evaluator@1.0.0","_npmVersion":"6.5.0","_nodeVersion":"11.9.0","_npmUser":{"name":"phosphore","email":"lorenzo.stl@gmail.com"},"dist":{"integrity":"sha512-xTjiH9+tmAB34RoLhDIqQlRkHZmYr8JiohAPwv/AC2uZqR8Q7wzGOcPMPLK+wHeYLqbjVoUR/pmTHUzVjNCbxw==","shasum":"c6db7f500665769b566d3c5668b8d1e4fc0e6d0f","tarball":"https://registry.npmjs.org/@doyensec/csp-evaluator/-/csp-evaluator-1.0.0.tgz","fileCount":3,"unpackedSize":205736,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\n+84b\r\n=7Xkt\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIFYz/4hVrxLtYPpiCxaBonH0A0UDJm5bstaZChaHQpw2AiEAzhWnFBHPTNRwaPZn+Ufme5l8V+GRWVID9mPtbRNjFmY="}]},"maintainers":[{"name":"phosphore","email":"lorenzo.stl@gmail.com"},{"name":"lucads","email":"luca@doyensec.com"}],"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/csp-evaluator_1.0.0_1551274906382_0.7288111455778907"},"_hasShrinkwrap":false},"1.0.1":{"name":"@doyensec/csp-evaluator","version":"1.0.1","description":"npm porting of the Google CSP evaluator library","main":"csp_evaluator.js","repository":{"type":"git","url":"git+https://github.com/google/csp-evaluator.git"},"author":{"name":"info@doyensec.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/google/csp-evaluator/issues"},"homepage":"https://github.com/doyensec/electronegativity#readme","keywords":["csp","security"],"_id":"@doyensec/csp-evaluator@1.0.1","_npmVersion":"6.5.0","_nodeVersion":"11.9.0","_npmUser":{"name":"phosphore","email":"lorenzo.stl@gmail.com"},"dist":{"integrity":"sha512-EYzzG+d6P64Wo+x/i4yiwq3hVzTsMQrxgHtR5o5+awDA5wAlk1etgw3wS0mIRTU/Ao883qAxR3VayGxuyDglCQ==","shasum":"a38ab4bfd8338c798c3c8b580e44880f749b057c","tarball":"https://registry.npmjs.org/@doyensec/csp-evaluator/-/csp-evaluator-1.0.1.tgz","fileCount":4,"unpackedSize":207614,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n\r\nwsFcBAEBCAAQBQJcdpYgCRA9TVsSAnZWagAA3KEP+QB/yTANvR9YAUOUHGxY\nvzfPEq5vOntmXgcgaqE9HgA25WBOsF3nEKiJ6lOhzP0Hz2zvWDYVTEdc8zaS\nZX4afF6vrQlQ2EbDWqOOqim1Gpm6CaPbWZCYelgoaG86g8FR2gx65RTaUJP0\nwmi9bI4NZE3ldjLaGOYnA+oNlsA/cN3uQzSa//jBeqHT7yG1hcQFv73nCkYp\nDvlwUfyye0tJvbs/t3+JNBRM1zUfNk3CjyF/7swpwDXjhQQN76Hn2UGzOaDS\nZyS7VR0Hp58mmQPfErxiy22qNiBrIAef06lq2ZuiwPeY/XqEujZGM9zrWLqe\nnDFSsJTYJQbZTn1t6F3t/Cn4NjZOK6Q6GEaAi/tqSMSAkDpoJ9TBQsDJdgci\nFfxiPFUXXPmgChciKo4AAjO80b02yVw1TvF9H7cHUNxrZuYhxYQw7Uh54RA+\nXDjDKzGVnjs41XJsrPYNdlJlYcxjtkpjQ9xk1CKD8dau/OGgtmJHdXJ1kNvs\ni/Hi3PTmYpiUvLf7YDwpvLgOaqJjH/E7Rwk0p8V8udXjdAriyRSOiw6RAiIw\nFoQT9CiiIzIOwCcIW1fVy5DD19UEu5m9zOM9kUNjFUcXPNr7rfbfmXtfXawv\n7vKdvHUhXZ63L06Euiw8ya3OpS18UtlGlhml0JB9rAyXrDWwthICdiPkKbZf\n5L1r\r\n=6fWb\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEYCIQDXytESSIcuDE9Vg/XFFi/jHMkeYyVtKBDDK7bY4KNpqgIhAM3Db/wBtkXTbaTqmbDG2Db3YMnHS9E/+/2g3aVEpFKv"}]},"maintainers":[{"name":"lucads","email":"luca@doyensec.com"},{"name":"phosphore","email":"lorenzo.stl@gmail.com"}],"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/csp-evaluator_1.0.1_1551275552219_0.5735616971352524"},"_hasShrinkwrap":false},"1.0.2":{"name":"@doyensec/csp-evaluator","version":"1.0.2","description":"npm porting of the Google CSP evaluator library","main":"csp_evaluator.js","repository":{"type":"git","url":"git+https://github.com/google/csp-evaluator.git"},"author":{"name":"info@doyensec.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/google/csp-evaluator/issues"},"homepage":"https://github.com/doyensec/electronegativity#readme","keywords":["csp","security"],"_id":"@doyensec/csp-evaluator@1.0.2","_npmVersion":"6.5.0","_nodeVersion":"11.9.0","_npmUser":{"name":"phosphore","email":"lorenzo.stl@gmail.com"},"dist":{"integrity":"sha512-aVsedpaRyfxIopKn5cL9Uo+NhX3uq+7nVWrJ6//l5ghMzG5Q4blUVws2iyqa4LwW5LVNbkGqCzDRPGRWH4PCQQ==","shasum":"aa21cfa76079e6c34d5e4582f6c509cdbca83c0d","tarball":"https://registry.npmjs.org/@doyensec/csp-evaluator/-/csp-evaluator-1.0.2.tgz","fileCount":4,"unpackedSize":207624,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\nyPoT\r\n=WXMp\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCIF4tHhXHEk1jjs6/OmS/yDjf//TZuOt+KtQE5EYaneUOAiAUtWWEHQnBVusWwObEXQTptTtf5Ommr13KSiwk3jjYUw=="}]},"maintainers":[{"name":"lucads","email":"luca@doyensec.com"},{"name":"phosphore","email":"lorenzo.stl@gmail.com"}],"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/csp-evaluator_1.0.2_1551349390429_0.39042202389783687"},"_hasShrinkwrap":false},"1.0.3":{"name":"@doyensec/csp-evaluator","version":"1.0.3","description":"npm porting of the Google CSP evaluator library","main":"csp_evaluator.js","repository":{"type":"git","url":"git+https://github.com/google/csp-evaluator.git"},"author":{"name":"info@doyensec.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/google/csp-evaluator/issues"},"homepage":"https://github.com/doyensec/electronegativity#readme","keywords":["csp","security"],"_id":"@doyensec/csp-evaluator@1.0.3","_npmVersion":"6.5.0","_nodeVersion":"11.9.0","_npmUser":{"name":"phosphore","email":"lorenzo.stl@gmail.com"},"dist":{"integrity":"sha512-Nz2QxdGiYh7nHgRU4R5/v6NDGW+IYv7j7dyQgpjtl4aJzrwHAdoZ0yxz7/YO8bgIOyDJJlF7jbUqjYpPClk9ZQ==","shasum":"0d0405cbfb5bb814c24b8a73736a9700da2c681f","tarball":"https://registry.npmjs.org/@doyensec/csp-evaluator/-/csp-evaluator-1.0.3.tgz","fileCount":4,"unpackedSize":207888,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\n4iuv\r\n=NLr2\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCIG16ItSUW3AEbpwIbR35yUnZG7c8oga2Np5aaKM7L5beAiBDQe2hVXnkfsqJJorn8AbpIW+6OOqH4vDtxmyWcgWgmg=="}]},"maintainers":[{"name":"lucads","email":"luca@doyensec.com"},{"name":"phosphore","email":"lorenzo.stl@gmail.com"}],"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/csp-evaluator_1.0.3_1551533184762_0.11338917160493112"},"_hasShrinkwrap":false}},"time":{"created":"2019-02-27T13:41:46.207Z","1.0.0":"2019-02-27T13:41:46.540Z","modified":"2022-04-05T05:31:32.421Z","1.0.1":"2019-02-27T13:52:32.389Z","1.0.2":"2019-02-28T10:23:10.605Z","1.0.3":"2019-03-02T13:26:24.889Z"},"maintainers":[{"name":"lucads","email":"luca@doyensec.com"},{"name":"phosphore","email":"lorenzo.stl@gmail.com"}],"description":"npm porting of the Google CSP evaluator library","homepage":"https://github.com/doyensec/electronegativity#readme","keywords":["csp","security"],"repository":{"type":"git","url":"git+https://github.com/google/csp-evaluator.git"},"author":{"name":"info@doyensec.com"},"bugs":{"url":"https://github.com/google/csp-evaluator/issues"},"license":"Apache-2.0","readme":"# CSP Evaluator Core NPM Library\n\n## Introduction\n\nPlease note: this is a porting of the [original CSP evaluator library](https://github.com/google/csp-evaluator).\n\nThis is not an official Google product.\n\nCSP Evaluator allows developers and security experts to check if a Content\nSecurity Policy ([CSP](https://csp.withgoogle.com/docs/index.html)) serves as a\nstrong mitigation against [cross-site scripting\nattacks](https://www.google.com/about/appsecurity/learning/xss/). It assists\nwith the process of reviewing CSP policies, and helps identify subtle CSP\nbypasses which undermine the value of a policy. CSP Evaluator checks are based\non a [large-scale study](https://research.google.com/pubs/pub45542.html) and are\naimed to help developers to harden their CSP and improve the security of their\napplications. This tool (also available as a [Chrome\nextension](https://chrome.google.com/webstore/detail/csp-evaluator/fjohamlofnakbnbfjkohkbdigoodcejf))\nis provided only for the convenience of developers and Google provides no\nguarantees or warranties for this tool.\n\nCSP Evaluator comes with a built-in list of common CSP whitelist bypasses which\nreduce the security of a policy. This list only contains popular bypasses and is\nby no means complete.\n\nThe CSP Evaluator library + frontend is deployed here:\nhttps://csp-evaluator.withgoogle.com/\n\n\n### Example usage\n\n```javascript\n\tconst csp = require(\"@doyensec/csp-evaluator\")\n\n    var rawCsp = \"script-src data: https://www.google.com;\";\n    var parser = new csp.CspParser(rawCsp);\n    var evaluator = new csp.CspEvaluator(parser.csp, csp.Version.CSP3);\n    var findings = evaluator.evaluate();\n    console.log(findings);\n```\n\n## Credits\n\nThis package is used by [Electronegativity](https://github.com/doyensec/electronegativity).\nElectronegativity has been sponsored by [Doyensec LLC](https://www.doyensec.com).\n\n![alt text](https://doyensec.com/images/logo.svg \"Doyensec Logo\")\n\n","readmeFilename":"README.md"}