Overview

csplogger is an endpoint designed to aggregate and analyze Content Security Policy (CSP) violations across your infrastructure. It is aimed at individuals who want to implement a secure CSP without any issues. The tool allows for a progressive implementation of CSP hardening by monitoring violation reports sent by browsers.

Features

Essentiality and portability: csplogger is built using Flask, SQLite, and Datastore, making it lightweight and easy to deploy.
Dashboard: The tool provides a dashboard that allows users to search, filter, and order violations by type, timestamp, website, external resource, and more.
Configurable limits: csplogger includes configurable limits to prevent abuse and unreliable results from spoofed or crafted logs.
Security-focused implementation: The tool is implemented with security in mind and offers hardened profiles for SECCOMP and Apparmor.

Summary

csplogger is a powerful tool for managing and analyzing CSP violations in your infrastructure. Its essentiality and portability make it easy to deploy, while its dashboard provides a user-friendly interface for managing violations. With configurable limits and security-focused implementation, csplogger ensures reliable and secure results.

Giuliocomi

Csplogger