Setting CSP

[Pomax]

Is there a way to set CSP in a similar way to setting CORS, or more generically, is there a way to manually specify a batch of headers to send with each response? Having to actually write a complete Node based server solution just to test that a page works with CSP in place is really silly if http-server would allow that kind of testing with a one line, e.g.

> http-server -p 8000 --cors --csp="default-src 'self'; img-src *; media-src example.com; script-src 'self'"

[ronaldohoch]

Can I work on a PR for Hacktoberfest?

[Pomax]

probably won't do much: I submitted a PR in August, and no one's even looked at it yet. There's 45 open pull requests, and all signs that the maintainers have abandoned this project.

[thornjad]

@ronaldohoch go for it! I opted-in this project to Hacktoberfest, so anything you submit will count after the maturity period. The current maintainer team is quite busy with other things, but I'm trying to get things moving again

[Tofandel]

#687 or #282 Would solve this
Ground was laid in #28 but was missing the cli options

This is a much requested feature:

Related:
#684
#281

[github-actions]

This issue has been inactive for 180 days

[Pomax]

@Tofandel I assume you no longer work on this? (the thing is, we don't need "a great solution", as an unmaintained library that still gets 2 million downloads a eek, we just need literally anything - sitting on a PR because of missing docs or tests is just bad policy in this context: land the code, add a usage note to the readme as PR approver, and evryone is better off)