aCSP Builder
A WordPress plugin that automatically adds cryptographic nonces to every script & stylesheet, lets you hash-lock inline code, and builds a bullet-proof Content Security Policy in one click. See readme.txt for full description, changelog and installation instructions.
Install
No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:
wp plugin install https://github.com/awhadi/acsp-builder/archive/refs/heads/main.zipVersion: 1.5.1 Date: 2026-06-17 Author: Awhadi
Summary
aCSP Builder is a WordPress plugin for creating, testing, and managing Content Security Policy headers. Version 1.5.1 refines the admin design, improves Settings export/import guidance, loads the related plugin list dynamically, and removes redundant debug/asset code while preserving existing CSP functionality.
Files Changed
acsp-builder.phpincludes/class-admin.phpincludes/class-ajax.phpincludes/class-csp-engine.phpincludes/class-db.phpincludes/class-violation-handler.phpincludes/class-presets.phpincludes/class-settings.phpadmin/acsp-about.phpadmin/acsp-custom-builder.phpadmin/acsp-presets.phpadmin/acsp-settings.phpadmin/acsp-violations.phpassets/acsp-builder.jsassets/acsp-settings.jsassets/acsp-violations.jsassets/acsp.cssreadme.txtCHANGELOG.md
Security And UX Notes
- Admin pages now use a cleaner CSP-themed design while keeping CSS externalized.
- Export/import guidance now clearly explains that JSON files include policy and settings.
- The related plugin list is fetched from the public plugin directory, cached, and falls back to WordPress.org.
- Verbose report/debug logging was removed to avoid writing CSP report bodies to logs.
- Existing nonce, hash, reporting, preset, and policy-builder behavior is preserved.
Rollback Plan
Restore version 1.5.0 from the previous plugin package or version control snapshot. No database rollback is required for this release.