Function parse_policy_list 

pub fn parse_policy_list(input: &str) -> PolicyList

Parses a serialized CSP or comma-separated CSP list (as sent in the Content-Security-Policy HTTP header) into a PolicyList.

This only performs the generic, directive-independent split described by CSP3 §2.2/§2.3 (serialized-policy-list / serialized-policy / serialized-directive) – directive values are kept raw. Directive name/value byte-class conformance is available per directive via Directive::name_is_valid/Directive::value_is_valid.

Examples found in repository

examples/parse.rs (line 16)

fn main() {
    let policy = "default-src 'self'; \
                  script-src 'self' 'nonce-2726c7f26c' https://cdn.example.com; \
                  img-src 'self' data:; \
                  frame-ancestors 'none'; \
                  upgrade-insecure-requests; \
                  report-to csp-endpoint";

    println!("Parsing: {policy}\n");

    let policy_list = parse_policy_list(policy);
    for policy in &policy_list.policies {
        for directive in &policy.directives {
            println!("{}:", directive.name);
            match directive.value() {
                DirectiveValue::SourceList(list) => println!("  source list: {list:?}"),
                DirectiveValue::AncestorSourceList(list) => {
                    println!("  ancestor source list: {list:?}");
                }
                DirectiveValue::Boolean => println!("  (no value)"),
                DirectiveValue::Token(token) => println!("  token: {token:?}"),
                other => println!("  {other:?}"),
            }
        }
    }
}