moved CSP to top-level directory and fixed README file

salcho · Aug 12, 2020 · dd14bf0 · dd14bf0
1 parent 87ebc81
commit dd14bf0
Show file tree

Hide file tree

Showing 38 changed files with 5 additions and 1 deletion.
diff --git a/src/Middleware/CSP/CSP.slnf → CSP/CSP.slnf b/src/Middleware/CSP/CSP.slnf → CSP/CSP.slnf
diff --git a/src/Middleware/CSP/README.md → CSP/README.md b/src/Middleware/CSP/README.md → CSP/README.md
@@ -4,6 +4,7 @@
 
 This directory contains .NET Core middleware for Content Security Policy (CSP). CSP is a very popular security mitigation against XSS and other injection vulnerabilities. CSP comes in many flavours, but we've chosen to add support for the most robust of them: nonce-based, strict-dynamic CSP.
 
+Design document: [Implementing CSP Support in .NET Core](https://docs.google.com/document/d/13NPKn65Wf1PdIwNL7H0cxhwmp2r8ZTe6vizXzO2HqY4/edit#)
 There was a previous discussion about CSP in .NET [here](https://github.com/dotnet/aspnetcore/issues/6001), that we have considered for our design.
 
 ## Contributions
@@ -12,7 +13,7 @@ This directory includes the following changes:
 * Allow configuration of whether CSP enabled in reporting or enforcement modes.
 * Allows configuration of a report URI, for violation reports sent by the browser.
 * CSP middleware generates a nonce-based, strict-dynamic policy.
-* Middleware adds thepolicy to HTTP responses according to the configuration.
+* Middleware adds the policy to HTTP responses according to the configuration.
 * Custom <script> TagHelper to set nonce attribute on script blocks automatically.
 * Provides a default implementation of a CSP violation report collection endpoint.
 * Example app that uses our CSP middleware and corresponding basic unit tests.
@@ -29,6 +30,9 @@ policyBuilder.WithCspMode(CspMode.ENFORCING)
 ```
 You can find the sample app under `./test/testassets/CspApplication/` directory.
 
+# Point of contact
+* Barry Dorrans - barry.dorrans@microsoft.com
+
 ## Authors
 * Co-authored-by: Aaron Shim - aaronshim@google.com
 * Co-authored-by: Santiago Diaz - salchoman@gmail.com
diff --git a/...ddleware/CSP/src/ContentSecurityPolicy.cs → CSP/src/ContentSecurityPolicy.cs b/...ddleware/CSP/src/ContentSecurityPolicy.cs → CSP/src/ContentSecurityPolicy.cs
diff --git a/...e/CSP/src/ContentSecurityPolicyBuilder.cs → CSP/src/ContentSecurityPolicyBuilder.cs b/...e/CSP/src/ContentSecurityPolicyBuilder.cs → CSP/src/ContentSecurityPolicyBuilder.cs
diff --git a/src/Middleware/CSP/src/CspConstants.cs → CSP/src/CspConstants.cs b/src/Middleware/CSP/src/CspConstants.cs → CSP/src/CspConstants.cs
diff --git a/src/Middleware/CSP/src/CspMiddleware.cs → CSP/src/CspMiddleware.cs b/src/Middleware/CSP/src/CspMiddleware.cs → CSP/src/CspMiddleware.cs
diff --git a/...leware/CSP/src/CspMiddlewareExtensions.cs → CSP/src/CspMiddlewareExtensions.cs b/...leware/CSP/src/CspMiddlewareExtensions.cs → CSP/src/CspMiddlewareExtensions.cs
diff --git a/src/Middleware/CSP/src/CspReport.cs → CSP/src/CspReport.cs b/src/Middleware/CSP/src/CspReport.cs → CSP/src/CspReport.cs
diff --git a/src/Middleware/CSP/src/CspReportLogger.cs → CSP/src/CspReportLogger.cs b/src/Middleware/CSP/src/CspReportLogger.cs → CSP/src/CspReportLogger.cs
diff --git a/...dleware/CSP/src/CspReportingMiddleware.cs → CSP/src/CspReportingMiddleware.cs b/...dleware/CSP/src/CspReportingMiddleware.cs → CSP/src/CspReportingMiddleware.cs
diff --git a/src/Middleware/CSP/src/INonce.cs → CSP/src/INonce.cs b/src/Middleware/CSP/src/INonce.cs → CSP/src/INonce.cs
diff --git a/...e/CSP/src/Microsoft.AspNetCore.Csp.csproj → CSP/src/Microsoft.AspNetCore.Csp.csproj b/...e/CSP/src/Microsoft.AspNetCore.Csp.csproj → CSP/src/Microsoft.AspNetCore.Csp.csproj
diff --git a/...ddleware/CSP/src/NoncedScriptTagHelper.cs → CSP/src/NoncedScriptTagHelper.cs b/...ddleware/CSP/src/NoncedScriptTagHelper.cs → CSP/src/NoncedScriptTagHelper.cs
diff --git a/...Tests/ContentSecurityPolicyBuilderTest.cs → ...Tests/ContentSecurityPolicyBuilderTest.cs b/...Tests/ContentSecurityPolicyBuilderTest.cs → ...Tests/ContentSecurityPolicyBuilderTest.cs
diff --git a/...st/UnitTests/ContentSecurityPolicyTest.cs → ...st/UnitTests/ContentSecurityPolicyTest.cs b/...st/UnitTests/ContentSecurityPolicyTest.cs → ...st/UnitTests/ContentSecurityPolicyTest.cs
diff --git a/.../CSP/test/UnitTests/CspMiddlewareTests.cs → CSP/test/UnitTests/CspMiddlewareTests.cs b/.../CSP/test/UnitTests/CspMiddlewareTests.cs → CSP/test/UnitTests/CspMiddlewareTests.cs
diff --git a/...CSP/test/UnitTests/CspReportLoggerTest.cs → CSP/test/UnitTests/CspReportLoggerTest.cs b/...CSP/test/UnitTests/CspReportLoggerTest.cs → CSP/test/UnitTests/CspReportLoggerTest.cs
diff --git a/...ests/Microsoft.AspNetCore.Csp.Test.csproj → ...ests/Microsoft.AspNetCore.Csp.Test.csproj b/...ests/Microsoft.AspNetCore.Csp.Test.csproj → ...ests/Microsoft.AspNetCore.Csp.Test.csproj
diff --git a/...iddleware/CSP/test/UnitTests/TestUtils.cs → CSP/test/UnitTests/TestUtils.cs b/...iddleware/CSP/test/UnitTests/TestUtils.cs → CSP/test/UnitTests/TestUtils.cs
diff --git a/...spApplication/CspMiddlewareWebSite.csproj → ...spApplication/CspMiddlewareWebSite.csproj b/...spApplication/CspMiddlewareWebSite.csproj → ...spApplication/CspMiddlewareWebSite.csproj
diff --git a/...tassets/CspApplication/Pages/Error.cshtml → ...tassets/CspApplication/Pages/Error.cshtml b/...tassets/CspApplication/Pages/Error.cshtml → ...tassets/CspApplication/Pages/Error.cshtml
diff --git a/...sets/CspApplication/Pages/Error.cshtml.cs → ...sets/CspApplication/Pages/Error.cshtml.cs b/...sets/CspApplication/Pages/Error.cshtml.cs → ...sets/CspApplication/Pages/Error.cshtml.cs
diff --git a/...tassets/CspApplication/Pages/Index.cshtml → ...tassets/CspApplication/Pages/Index.cshtml b/...tassets/CspApplication/Pages/Index.cshtml → ...tassets/CspApplication/Pages/Index.cshtml
diff --git a/...sets/CspApplication/Pages/Index.cshtml.cs → ...sets/CspApplication/Pages/Index.cshtml.cs b/...sets/CspApplication/Pages/Index.cshtml.cs → ...sets/CspApplication/Pages/Index.cshtml.cs
diff --git a/...ssets/CspApplication/Pages/Privacy.cshtml → ...ssets/CspApplication/Pages/Privacy.cshtml b/...ssets/CspApplication/Pages/Privacy.cshtml → ...ssets/CspApplication/Pages/Privacy.cshtml
diff --git a/...ts/CspApplication/Pages/Privacy.cshtml.cs → ...ts/CspApplication/Pages/Privacy.cshtml.cs b/...ts/CspApplication/Pages/Privacy.cshtml.cs → ...ts/CspApplication/Pages/Privacy.cshtml.cs
diff --git a/...spApplication/Pages/Shared/_Layout.cshtml → ...spApplication/Pages/Shared/_Layout.cshtml b/...spApplication/Pages/Shared/_Layout.cshtml → ...spApplication/Pages/Shared/_Layout.cshtml
diff --git a/...s/Shared/_ValidationScriptsPartial.cshtml → ...s/Shared/_ValidationScriptsPartial.cshtml b/...s/Shared/_ValidationScriptsPartial.cshtml → ...s/Shared/_ValidationScriptsPartial.cshtml
diff --git a/.../CspApplication/Pages/_ViewImports.cshtml → .../CspApplication/Pages/_ViewImports.cshtml b/.../CspApplication/Pages/_ViewImports.cshtml → .../CspApplication/Pages/_ViewImports.cshtml
diff --git a/...ts/CspApplication/Pages/_ViewStart.cshtml → ...ts/CspApplication/Pages/_ViewStart.cshtml b/...ts/CspApplication/Pages/_ViewStart.cshtml → ...ts/CspApplication/Pages/_ViewStart.cshtml
diff --git a/.../test/testassets/CspApplication/README.md → CSP/test/testassets/CspApplication/README.md b/.../test/testassets/CspApplication/README.md → CSP/test/testassets/CspApplication/README.md
diff --git a/...test/testassets/CspApplication/Startup.cs → ...test/testassets/CspApplication/Startup.cs b/...test/testassets/CspApplication/Startup.cs → ...test/testassets/CspApplication/Startup.cs
diff --git a/...pApplication/appsettings.Development.json → ...pApplication/appsettings.Development.json b/...pApplication/appsettings.Development.json → ...pApplication/appsettings.Development.json
diff --git a/...estassets/CspApplication/appsettings.json → ...estassets/CspApplication/appsettings.json b/...estassets/CspApplication/appsettings.json → ...estassets/CspApplication/appsettings.json
diff --git a/...ssets/CspApplication/wwwroot/css/site.css → ...ssets/CspApplication/wwwroot/css/site.css b/...ssets/CspApplication/wwwroot/css/site.css → ...ssets/CspApplication/wwwroot/css/site.css
diff --git a/...assets/CspApplication/wwwroot/favicon.ico → ...assets/CspApplication/wwwroot/favicon.ico b/...assets/CspApplication/wwwroot/favicon.ico → ...assets/CspApplication/wwwroot/favicon.ico
diff --git a/...sets/CspApplication/wwwroot/js/example.js → ...sets/CspApplication/wwwroot/js/example.js b/...sets/CspApplication/wwwroot/js/example.js → ...sets/CspApplication/wwwroot/js/example.js
diff --git a/...tassets/CspApplication/wwwroot/js/site.js → ...tassets/CspApplication/wwwroot/js/site.js b/...tassets/CspApplication/wwwroot/js/site.js → ...tassets/CspApplication/wwwroot/js/site.js