Examine source code of cSPY - SecurityHeader Scanner

Inspect and view changes in cSPY - SecurityHeader Scanner source codes across current and past versions

Please login to examine the extension's source code.

manifest.json

{
  "manifest_version": 3,
  "name": "CSPy — Security Header & CSP Scanner",
  "short_name": "CSPy",
  "version": "2.0.0",
  "description": "Advanced security header auditor. Deep CSP analysis, HSTS preload check, cookie audit, CORS misconfig detection, Mozilla Observatory–style scoring. By VaultOcean.",
  "author": "VaultOcean",
  "homepage_url": "https://cspy.vaultocean.com",
  "icons": {
    "16": "icons/icon-16.png",
    "32": "icons/icon-32.png",
    "48": "icons/icon-48.png",
    "128": "icons/icon-128.png"
  },
  "action": {
    "default_title": "CSPy — Security Header Scanner",
    "default_icon": {
      "16": "icons/icon-16.png",
      "32": "icons/icon-32.png",
      "48": "icons/icon-48.png"
    },
    "default_popup": "popup/popup.html"
  },
  "background": {
    "scripts": [
      "background/background.js"
    ]
  },
  "content_scripts": [
    {
      "matches": [
        "<all_urls>"
      ],
      "js": [
        "content/scanner.js"
      ],
      "run_at": "document_idle",
      "all_frames": false
    }
  ],
  "permissions": [
    "webRequest",
    "tabs",
    "storage",
    "cookies",
    "notifications",
    "scripting",
    "downloads"
  ],
  "host_permissions": [
    "<all_urls>"
  ],
  "content_security_policy": {
    "extension_pages": "default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; connect-src 'self'; base-uri 'none'; form-action 'none'; object-src 'none'; frame-ancestors 'none'"
  },
  "browser_specific_settings": {
    "gecko": {
      "id": "{b0426bed-92ec-4a3e-8842-86cd7b972a85}",
      "strict_min_version": "140.0",
      "data_collection_permissions": {
        "required": [
          "none"
        ]
      }
    }
  }
}