Title: Content Security Policy Manager Author: Patrick Sletvold Published: 2020년 7월 21일 Last modified: 2022년 8월 9일 --- 플러그인 검색 이 플러그인은 **최근 3개의 주요 워드프레스 출시와 시험 되지 않았습니다**. 워드프레스의 좀 더 최근 버전으로 이용할 때 더 이상 관리되지 않고 지원되지 않고 호환성 문제가 있을 수 있습니다. ![](https://s.w.org/plugins/geopattern-icon/csp-manager.svg) # Content Security Policy Manager 작성자: [Patrick Sletvold](https://profiles.wordpress.org/16patsle/) [다운로드](https://downloads.wordpress.org/plugin/csp-manager.1.2.1.zip) * [세부사항](https://ko.wordpress.org/plugins/csp-manager/#description) * [평가](https://ko.wordpress.org/plugins/csp-manager/#reviews) * [개발](https://ko.wordpress.org/plugins/csp-manager/#developers) [지원](https://wordpress.org/support/plugin/csp-manager/) ## 설명 **Content Security Policy Manager** is a WordPress plugin that allows you to easily configure [Content Security Policy headers](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP) for your site. You can have different CSP headers for the admin interface, the frontend for logged in users, and the frontend for regular visitors. The CSP directives can be individually enabled, and each policy can be set to enforce, report or be disabled. Please note that this plugin offers limited help in figuring out what the contents of the policy should be. It only lets you configure the CSP in a easy to use interface. ## FAQ ### What is a Content Security Policy? To quote MDN: > Content Security Policy (CSP) is an added layer of security that helps to detect > and mitigate certain types of attacks, including Cross Site Scripting (XSS) and > data injection attacks. These attacks are used for everything from data theft > to site defacement to distribution of malware. > To enable CSP, you need to configure your web server to return the Content-Security- > Policy HTTP header. ### How do I enable reporting? Reporting can be enabled by setting the report-uri and/or report-to directives. You will need the URL to a server that can handle these kinds of reports, which there are several of. [Report URI](https://report-uri.com/) is one example of such a service, they have a free tier that allows up to 10 000 reports per month (any more than that is just ignored, no extra cost). They also have a CSP wizard that can help you construct your policy. Reporting can be enabled both in report only mode and in enforce mode. You can use report-only mode to evaluate the contents of the policy by looking at which resources are reported as blocked. ## 후기 ![](https://secure.gravatar.com/avatar/a6ae1eb28cec727feb2e8de616c2ef982f88388d9abe21ccc7e8db93682b285b? s=60&d=retro&r=g) ### 󠀁[Report To not working](https://wordpress.org/support/topic/report-to-not-working/)󠁿 [ningmorris](https://profiles.wordpress.org/ningmorris/) 2023년 7월 13일 Hello, Since report-uri is no longer recommended anymore, I need to use report-to to send CSP reports. But for reason, it doesn’t send reports with report-to. My CSP settings are as follows: In Policy: report-to filed, I filled in csp-endpoint, in Frontend Policy Report-To Header field, I filled in the following JSON data {“ group”: “csp-endpoint”, “max_age”: 10886400, “endpoints”: [ { “url”: “{CSP REPORT ENDPOINT}” } ] } After saving changes in the CMS, all the commas disappeared in Frontend Policy Report-To Header field. { “group”: “csp-endpoint” “max_age”: 10886400“ endpoints”: [ { “url”: “{CSP REPORT ENDPOINT}” } ] } I am wondering if you can help to take a look at it, thanks! Note: I have no problem with report-uri. ![](https://secure.gravatar.com/avatar/7661642e7f2ec5a348fffa107b167c46445c206822a8699cbddb40e857f68d0a? s=60&d=retro&r=g) ### 󠀁[kills all CSS styles](https://wordpress.org/support/topic/kills-all-css-styles/)󠁿 [rintelengrafik](https://profiles.wordpress.org/rintelengrafik/) 2023년 2월 18일 As soon as I leave the backend the view of my side is without any CSS. Only the plain HTML. ![](https://secure.gravatar.com/avatar/8a678a70061d4e07b7234182bcc79598fe06a0516f01d64e90597c19f503061b? s=60&d=retro&r=g) ### 󠀁[Very helpful and useful plugin. do you provide filters ?](https://wordpress.org/support/topic/very-helpful-and-useful-plugin-do-you-provide-filters/)󠁿 [buzibuzi](https://profiles.wordpress.org/buzibuzi/) 2023년 1월 25일 We are really happy with this plugin.im wondering if you provide a filter so i can merge some dynamic ‘nonce-xx’ to the policy header. this could be very very useful. ![](https://secure.gravatar.com/avatar/e371a5ff70982d6817347632f03e88b34e534d4fd2e76a1f841db07c28178365? s=60&d=retro&r=g) ### 󠀁[I like all the options for logged-in versus anonymous and report-only](https://wordpress.org/support/topic/i-like-all-the-options-for-logged-in-versus-anonymous-and-report-only/)󠁿 [Jason Robinson](https://profiles.wordpress.org/jsrobinson/) 2022년 4월 10일 This plugin is well thought out and does what I need it to. It has also helped me troubleshoot other website’s CSP that wasn’t working correctly, and the documentation is solid if brief. ![](https://secure.gravatar.com/avatar/1e271d290377997c8dcb90ca03a711894c2401648ce1b903248062dc144e4aa5? s=60&d=retro&r=g) ### 󠀁[Extraordinaire !](https://wordpress.org/support/topic/extraordinaire-4/)󠁿 [jeebeezebee](https://profiles.wordpress.org/jeebeezebee/) 2021년 11월 1일 Ce plugin m;a fait gagner des heures de travail. ![](https://secure.gravatar.com/avatar/a5997a96f2b037d2a14c8f6f0a8902af691711249b09fb23209ad4869395baec? s=60&d=retro&r=g) ### 󠀁[Great plugin to manage CSP](https://wordpress.org/support/topic/great-plugin-to-manage-csp/)󠁿 [c3idesign](https://profiles.wordpress.org/c3idesign/) 2021년 5월 14일 Great plugin, thank you. [ 모든 5 평가 읽기 ](https://wordpress.org/support/plugin/csp-manager/reviews/) ## 기여자 & 개발자 “Content Security Policy Manager”(은)는 오픈 소스 소프트웨어입니다. 다음의 사람들이 이 플러그인에 기여하였습니다. 기여자 * [ Patrick Sletvold ](https://profiles.wordpress.org/16patsle/) “Content Security Policy Manager”(이)가 1 개 언어로 번역되었습니다. 기여해 주셔서 [번역자](https://translate.wordpress.org/projects/wp-plugins/csp-manager/contributors) 님께 감사드립니다. [자국어로 “Content Security Policy Manager”(을)를 번역하세요.](https://translate.wordpress.org/projects/wp-plugins/csp-manager) ### 개발에 관심이 있으십니까? [코드 탐색하기](https://plugins.trac.wordpress.org/browser/csp-manager/)는, [SVN 저장소](https://plugins.svn.wordpress.org/csp-manager/) 를 확인하시거나, [개발 기록](https://plugins.trac.wordpress.org/log/csp-manager/) 을 [RSS](https://plugins.trac.wordpress.org/log/csp-manager/?limit=100&mode=stop_on_copy&format=rss) 로 구독하세요. ## 변경이력 This plugin’s development happens in [its GitHub repo](https://github.com/16patsle/wordpress-csp-manager). Feel free to send bug reports there. ### 1.2.1 * Fix error caused by improperly checking the chosen CSP mode when outputting headers( thanks @reatlat). ### 1.2.0 * Improved UI, with CSP directives divided into collapsible categories. * Add all remaining non-deprecated CSP directives. * Warn if enabling upgrade-insecure-requests on a site that does not support HTTPS. * Sanitize directives on save and disallow newlines in header content. * Various internal improvements. ### 1.1.0 This is a relatively small update, that only contains a few more CSP directives. The next update will contain even more, along with an updated user interface. * Add some commonly used CSP headers that were missing (thanks Master Dan). * Add some other user requested directives. * Fix some translator comments. ### 1.0.0 First version. * Support for different policies for admin, logged-in frontend and regular visitors. * Different policies can have different reporting/enforcing mode. * Directives can be configured separately, to easier see what is allowed in which cases. * Support for configuring the Report-To header. ## 기초 * 버전 **1.2.1** * 최근 업데이트: **4년 전** * 활성화된 설치 **2,000+** * 워드프레스 버전 ** 4.6 또는 그 이상 ** * 다음까지 시험됨: **6.1.12** * PHP 버전 ** 7.2 또는 그 이상 ** * 언어 * [English (US)](https://wordpress.org/plugins/csp-manager/) 및 [Norwegian (Bokmål)](https://nb.wordpress.org/plugins/csp-manager/). * [자국어로 번역하기](https://translate.wordpress.org/projects/wp-plugins/csp-manager) * 태그: * [content security policy](https://ko.wordpress.org/plugins/tags/content-security-policy/) [csp](https://ko.wordpress.org/plugins/tags/csp/)[security](https://ko.wordpress.org/plugins/tags/security/) [Security Headers](https://ko.wordpress.org/plugins/tags/security-headers/)[xss](https://ko.wordpress.org/plugins/tags/xss/) * [고급 보기](https://ko.wordpress.org/plugins/csp-manager/advanced/) ## 평점 별 5점 만점에 4.3점. * [ 5/5-별점 후기 ](https://wordpress.org/support/plugin/csp-manager/reviews/?filter=5) * [ 0/4-별점 후기 ](https://wordpress.org/support/plugin/csp-manager/reviews/?filter=4) * [ 0/3-별점 후기 ](https://wordpress.org/support/plugin/csp-manager/reviews/?filter=3) * [ 0/2-별점 후기 ](https://wordpress.org/support/plugin/csp-manager/reviews/?filter=2) * [ 1/1-별점 후기 ](https://wordpress.org/support/plugin/csp-manager/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/csp-manager/reviews/#new-post) [모든 리뷰 보기](https://wordpress.org/support/plugin/csp-manager/reviews/) ## 기여자 * [ Patrick Sletvold ](https://profiles.wordpress.org/16patsle/) ## 지원 할 말 있으신가요? 도움이 필요하신가요? [지원 포럼 보기](https://wordpress.org/support/plugin/csp-manager/)