# hk2/csp 1.0.0

> Version 1.0.0 of hk2/csp, released 2022-06-16.

`composer require hk2/csp:1.0.0`

Canonical URL: https://packagento.com/hk2/csp/1.0.0

## At a glance

- **Released**: 2022-06-16
- **Magento**: >=100.0.0
- **PHP**: ^7.3.0|^7.4.0|^8.0|^8.1.0
- **QA**: pending

## What it does

This Module Whitelist CSP for Magento 2.3.5 or Above. HK2 CSP Whitelist some of the major url like Cloudflare, Google Analytics, Fontawesome, Addthis, Googleapis, Facebook Graph, Pinterest, Vimeo, Twitter. One can disable Magento 2 CSP. However, Disabling results in more possibilities of attacks on the Magento store. (CSP) are a powerful tool to mitigate against Cross Site Scripting (XSS) and related attacks.

## Dependencies

### Require

| Package | Constraint |
|---|---|
| magento/framework | >=100.0.0 |
| php | ^7.3.0\|^7.4.0\|^8.0\|^8.1.0 |

## Parent package

[hk2/csp](https://packagento.com/hk2/csp.md) — full catalogue, pricing, install steps, and vendor info.