.env.example

# Required (if not provided as command-line argument)
CSP_URL=https://example.com

# Boolean Options (set to 'true' to enable)
CSP_ALLOW_HTTP=false
CSP_ALLOW_PRIVATE_ORIGINS=false
CSP_ALLOW_UNSAFE_INLINE_SCRIPT=false
CSP_ALLOW_UNSAFE_INLINE_STYLE=false
CSP_ALLOW_UNSAFE_EVAL=false
CSP_REQUIRE_TRUSTED_TYPES=false

# Security Options
CSP_USE_STRICT_DYNAMIC=false
CSP_USE_NONCE=false
CSP_USE_HASHES=false
CSP_UPGRADE_INSECURE_REQUESTS=true
CSP_BLOCK_MIXED_CONTENT=true
CSP_RESTRICT_FRAMING=true
CSP_USE_SANDBOX=false

# Numeric Options
CSP_MAX_BODY_SIZE=0
CSP_TIMEOUT_MS=8000

# Complex Options
# Format: directive1:value1,value2;directive2:value3,value4
CSP_PRESETS="connect-src:https://api.example.com,wss://ws.example.com;font-src:https://fonts.example.com"

# JSON string for fetch options
CSP_FETCH_OPTIONS='{"headers":{"User-Agent":"Custom Agent"}}'

# Output Options
# Available formats: header, raw, json, csp-only
CSP_OUTPUT_FORMAT=header