yesod-csp

Add CSP headers to Yesod apps

MIT licensed by Bob Long

Maintained by Pascal Wittmann

This version can be pinned in stack with:yesod-csp-0.2.8.0@sha256:954e8e1eb056152e8fe49df6cff274742e610ec6e5d0d66d15fec20543a6f68e,2133

Depends on 13 packages(full list with versions):

Add CSP headers to Yesod apps. This helps reduce exposure to XSS attacks and bad assets.

Changes

Add support for CSP Level 3 directives: report-to, worker-src, manifest-src and prefetch-src

Relax version boundaries on template-haskell to be able to build with ghc-9.10 on nixos-25.11

Add support for remaining CSP Level 2 directives (see https://github.com/pSub/yesod-csp/pull/5)

Fixes compilation failure with ghc-9.0.2 or newer (see https://github.com/bobjflong/yesod-csp/issues/8)