Admin Tools

#31639 I need CSP security on one of my websites

Posted in ‘Admin Tools for Joomla! 4 & 5’

This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version

n/a

PHP version

n/a

Admin Tools version

n/a

Latest post by on Sunday, 08 September 2019 17:17 CDT

Thursday, 08 August 2019 16:50 CDT

brainynl

Hi, for one of my websites the client want the maximum level of security.
https://securityheaders.com/?q=iomtrainer.nl&followRedirects=on

So I want to implement the missing CSP rules. I tested a lot of possibility's via the recommended site https://www.cspisawesome.com/
but all rules gave me the 500 error.

Is there some way to test what options there are that should be set? Some step by step hand-out?

Best regards, Hein

Best regards, Hein
brainy.nl

Friday, 09 August 2019 03:22 CDT

tampe125

Hello,

what's listed in the site you linked refers to the headers to be used, the actual string that needs to be put inside the .htaccess file are different.
Please take a look at this site: https://content-security-policy.com/

The actual rule you have to create is something like this: Header set Content-Security-Policy "default-src 'self';"
Once you're happy with the result, please remember to set your custom rule inside the fiels Custom rules at the bottom of the .htacces file, so you won't lose them if you regenerate the file using the Htaccess Maker.

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Sunday, 08 September 2019 17:17 CDT

System Task

system

This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.

Edited by on 2019-09-08 17:17 CDT

Support