Analyze a policy value
Reviews a Content-Security-Policy header value and reports what each directive does and where the policy is weak, such as an unsafe keyword or an overly broad source. Nothing is fetched or saved, so use it for a policy you are drafting. To grade the policy a site serves, run a scan instead.
Limited to 30 requests a minute for each person, after which it answers 429 with a Retry-After header.
Requires membership of the workspace.
AuthorizationBearer <JWT>An OpenID Connect access token from signing in to CentralCSP, acting as the signed-in user.
workspaceId*stringThe workspace's id.
application/json- body
csp*stringThe Content-Security-Policy header value to review.
1 <= length <= 65536language?stringLanguage the findings are written in. en is English and fr is French.
"en""en""fr"The policy analysis.
application/json- response
[key: string]?anycurl -X POST 'https://api.centralcsp.com/v1/workspaces/01936b7a-6f2e-7c31-9a4d-2f8e1c5b7d90/csp/analyze' \ -H 'Content-Type: application/json' \ -d '{ "csp": "default-src '\''self'\''; script-src '\''self'\'' '\''report-sample'\'' https://js.stripe.com"}'{}Get a saved scan's findings GET
Returns the full report of a saved scan: every finding with its severity and how to fix it, the score breakdown behind each grade, and the headers and...
List technologies GET
Lists the libraries detected on the website, one row per library version, with its lifecycle status, how many known vulnerabilities affect it and the highest...