From d51ff09530d773bc16eaf62a1954a665951d6d32 Mon Sep 17 00:00:00 2001
From: Tim <ulf91@t-online.de>
Date: Sat, 27 Apr 2024 17:04:05 +0200
Subject: [PATCH] Adds opctim/symfony-csp-bundle (#1610)

* Adds opctim/symfony-csp-bundle

* Adds newline

* Dummy commit

* Dummy commit

* Dummy commit

* Updates README url

* Updates config template

* Adds version 1.1

* Changes ~ to null

* Dummy commit

* Adds routeParams config

* Dummy commit

* Removes 1.0

* Renames routeParams to route_params

* Comments out alias

* Removes anchor / alias

---------

Co-authored-by: Tim Nelles <tim.nelles@denkwerk.com>
---
 .../config/packages/opctim_csp_bundle.yaml    | 37 +++++++++++++++++++
 opctim/symfony-csp-bundle/1.1/manifest.json   |  8 ++++
 2 files changed, 45 insertions(+)
 create mode 100644 opctim/symfony-csp-bundle/1.1/config/packages/opctim_csp_bundle.yaml
 create mode 100644 opctim/symfony-csp-bundle/1.1/manifest.json

diff --git a/opctim/symfony-csp-bundle/1.1/config/packages/opctim_csp_bundle.yaml b/opctim/symfony-csp-bundle/1.1/config/packages/opctim_csp_bundle.yaml
new file mode 100644
index 00000000..ac054fd6
--- /dev/null
+++ b/opctim/symfony-csp-bundle/1.1/config/packages/opctim_csp_bundle.yaml
@@ -0,0 +1,37 @@
+opctim_csp_bundle:
+    # See https://github.com/opctim/symfony-csp-bundle?tab=readme-ov-file#the-always_add-option
+    always_add: []
+
+    # See https://github.com/opctim/symfony-csp-bundle?tab=readme-ov-file#the-report-option
+    report:
+        url: null
+        route: null
+        route_params: []
+        chance: 100
+
+    # https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+    # See https://github.com/opctim/symfony-csp-bundle?tab=readme-ov-file#configuration
+    directives:
+        default-src:
+            - "'self'"
+            - 'data:'
+            - 'https:'
+        base-uri:
+            - "'self'"
+        object-src:
+            - "'none'"
+        script-src:
+            - "'self'"
+        img-src:
+            - "'self'"
+        style-src:
+            - "'self'"
+            - "'unsafe-inline'"
+
+# For different set-ups in the dev environment
+when@dev:
+    opctim_csp_bundle:
+        # always_add: []
+
+        directives:
+            # Add your directive overrides here
diff --git a/opctim/symfony-csp-bundle/1.1/manifest.json b/opctim/symfony-csp-bundle/1.1/manifest.json
new file mode 100644
index 00000000..b9e2c2b8
--- /dev/null
+++ b/opctim/symfony-csp-bundle/1.1/manifest.json
@@ -0,0 +1,8 @@
+{
+    "copy-from-recipe": {
+        "config/": "%CONFIG_DIR%/"
+    },
+    "bundles": {
+        "Opctim\\CspBundle\\OpctimCspBundle": ["all"]
+    }
+}