csp-parse 0.1.0

A pure-Rust parser for the Content Security Policy (CSP) directive grammar
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

//! Parses a real multi-directive CSP and prints its structured
//! directives. Run with `cargo run --example parse`.

use csp_parse::{DirectiveValue, parse_policy_list};

fn main() {
    let policy = "default-src 'self'; \
                  script-src 'self' 'nonce-2726c7f26c' https://cdn.example.com; \
                  img-src 'self' data:; \
                  frame-ancestors 'none'; \
                  upgrade-insecure-requests; \
                  report-to csp-endpoint";

    println!("Parsing: {policy}\n");

    let policy_list = parse_policy_list(policy);
    for policy in &policy_list.policies {
        for directive in &policy.directives {
            println!("{}:", directive.name);
            match directive.value() {
                DirectiveValue::SourceList(list) => println!("  source list: {list:?}"),
                DirectiveValue::AncestorSourceList(list) => {
                    println!("  ancestor source list: {list:?}");
                }
                DirectiveValue::Boolean => println!("  (no value)"),
                DirectiveValue::Token(token) => println!("  token: {token:?}"),
                other => println!("  {other:?}"),
            }
        }
    }
}