content-security-policy-builder

Content Security Policy builder

Take an object and turn it into a Content Security Policy string. Useful for building Content Security Policy libraries.

It can handle a lot of things you can you throw at it; camelCased or dash-separated directives, arrays or strings, et cetera.

Usage:

var builder = require('content-security-policy-builder')

// default-src 'self' default.com; script-src scripts.com; whatever-src something
builder({
  directive: {
    defaultSrc: ["'self'", "default.com"],
    scriptSrc: "scripts.com"
    "whatever-src": "something"
  }
})