module for prestashop that a content security policy to prevent JS attacks

CSP Security is a PrestaShop module that implements a Content Security Policy (CSP) for your store to help prevent cross-site scripting (XSS) and other JavaScript-based attacks. The policy is applied by injecting the appropriate HTTP headers through the displayHeader hook, which runs on every page load.

• Content Security Policy enforcement: Adds CSP headers to all store pages to restrict the sources from which scripts and other resources can be loaded.
• Hook-based integration: The security logic is applied via the displayHeader hook, ensuring coverage across the entire front office.
• Standards-based approach: Designed to be compatible with tools such as Google's CSP Evaluator for policy validation and testing.

This module is suited for store owners and developers who want to harden their PrestaShop installation against client-side injection attacks by implementing a Content Security Policy. It is a lightweight, developer-oriented solution with minimal configuration overhead.