cspcrawler
a simple Content Security Policy crawler
Usage
lappy:~ johnwick$ make build
lappy:~ johnwick$ ./cspcrawler --url google.com
[
{
"domain": "https://google.com",
"tld": "com",
"raw_policy": "object-src 'none';base-uri 'self';script-src 'nonce-LCX_-MEFBaIHRWLA4_Okhw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp",
"policy_source": "header",
"exists": true,
"is_valid": true,
"directives": {
"base-uri": "'self'",
"object-src": "'none'",
"script-src": "'nonce-LCX_-MEFBaIHRWLA4_Okhw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:"
},
"report_uri": "https://csp.withgoogle.com/csp/gws/other-hp",
"upgrade_insecure_requests": false,
"block_all_mixed_content": false,
"error": null
}
]