SummerOfCode/2012/UserCSP

Project Title: User Specified Content Security Policy

Goal: The goal of this project is to allow savvy users to be able to voluntarily specify their own CSP policies for websites that have not implemented CSP policies. And automatically infer CSP policies for frequently visited websites if neither user nor web site publisher specify the CSP policy.

Project Status

Schedule of userCSP project deliverable:

April 30 - May 6 : Develop an add-on for userCSP.
May 7 - May 13 : Testing SQLite Database library
May 14 - May 20 : Create Database table to store user define policies. User provided domain name will be the primary key in the userCSP database.
May 21 - May 27 : Integrate Database into add-on UI
May 28 - June 10 : CSP Hooking and reading HTTP header.
June 11 - June 17: Discuss userCSP add-on UI with Mozilla UI team for feedback
June 19 - June 24: Filtering user inputs and follow w3c Standard
June 25 - July 1 : Catch up week
July 2 - July 8 : Testing add-on and discussion on how to infer policy automatically
July 9 - July 15 : Develop Database for storing information for automatically inferring CSP policy.
July 16 - July 29: Implement automatic CSP inferring rules.
July 30 - Aug 5 : test add-on with auto infer mode and prepare whitelist for commonly use third-party sites (such as, Facebook like button, Google gadget, etc.)
Aug 6 - Aug 19 (OPTINAL) : Show user what breaks.