Similar Burp extension

[h3xstream]

Hi Joe,
This is a simple notification to let you know that I have built a very similar extension. Both have passive rules to analyze CSP header(s).
I initially start the extension to have a readable View of the header in the response tab then I added some passive rules.

Anw, I not here to say that I am competing with your extension. I think that solely base on the fact that it was developed in Python could be useful for some people. I also saw that the passive rules are not exactly the same.

Finally, I am not close to exchanging information and contributions. Here are some list that am using to identify bad hosts configured (additional host to ajax.googleapis.com):

• https://github.com/GoSecure/csp-auditor/blob/master/csp-auditor-core/src/main/resources/resources/data/csp_host_user_content.txt
• https://github.com/GoSecure/csp-auditor/blob/master/csp-auditor-core/src/main/resources/resources/data/csp_host_vulnerable_js.txt

Also, I have submitted the extension just over a month ago for the Bapp Store.. I have no idea it will be accepted.

[moloch--]

Cool, it's all gravy man. I just wrote this to play around with the Burp APIs, I'm not heavily invested in it or anything.