174 lines
8.5 KiB
HTML
174 lines
8.5 KiB
HTML
<!doctype html>
|
||
<html lang="en">
|
||
<head>
|
||
<meta charset="utf-8">
|
||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||
<title>cspresso Recipes</title>
|
||
<meta name="description" content="cspresso recipes: common commands for crawling, debugging, sourcemaps, AppImage usage, and CI evaluation.">
|
||
<link rel="icon" href="favicon.ico">
|
||
|
||
<link rel="preconnect" href="https://fonts.googleapis.com">
|
||
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
|
||
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&family=JetBrains+Mono:wght@400;500;600&display=swap" rel="stylesheet">
|
||
|
||
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css" rel="stylesheet">
|
||
<link href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css" rel="stylesheet">
|
||
|
||
<link href="assets/css/site.css" rel="stylesheet">
|
||
|
||
<meta property="og:title" content="cspresso Recipes">
|
||
<meta property="og:description" content="cspresso recipes: common commands for crawling, debugging, sourcemaps, AppImage usage, and CI evaluation.">
|
||
<meta property="og:type" content="website">
|
||
</head>
|
||
<body>
|
||
<nav class="navbar navbar-expand-lg bg-white bg-opacity-75 sticky-top border-bottom" data-bs-theme="light" style="backdrop-filter: blur(8px);">
|
||
<div class="container py-1">
|
||
<a class="navbar-brand fw-bold d-flex align-items-center gap-2" href="index.html">
|
||
<img class="brand-mark" src="assets/img/cspresso.svg" alt="cspresso">
|
||
<span>cspresso</span>
|
||
</a>
|
||
<button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#nav" aria-controls="nav" aria-expanded="false" aria-label="Toggle navigation">
|
||
<span class="navbar-toggler-icon"></span>
|
||
</button>
|
||
<div class="collapse navbar-collapse" id="nav">
|
||
<ul class="navbar-nav ms-auto align-items-lg-center gap-lg-2">
|
||
<li class="nav-item"><a class="nav-link" href="docs.html">Docs</a></li>
|
||
<li class="nav-item"><a class="nav-link active fw-semibold" href="recipes.html">Recipes</a></li>
|
||
<li class="nav-item"><a class="nav-link" href="evaluate.html">Evaluate</a></li>
|
||
<li class="nav-item"><a class="nav-link" href="security.html">Security</a></li>
|
||
<li class="nav-item ms-lg-2">
|
||
<a class="btn btn-sm btn-outline-dark" href="https://git.mig5.net/mig5/cspresso" target="_blank" rel="noreferrer">
|
||
<i class="bi bi-git"></i> Repo
|
||
</a>
|
||
</li>
|
||
</ul>
|
||
</div>
|
||
</div>
|
||
</nav>
|
||
<main class="py-5">
|
||
<div class="container">
|
||
<header class="mb-4">
|
||
<div class="kicker mb-2"><i class="bi bi-lightning-charge"></i> Recipes</div>
|
||
<h1 class="display-6 fw-800 mb-2">Practical workflows</h1>
|
||
<p class="text-secondary mb-0">A handful of commands that cover most real-world cspresso usage.</p>
|
||
</header>
|
||
|
||
<div class="row g-4">
|
||
<div class="col-lg-6">
|
||
<h2 class="section-title fw-bold">Draft a CSP</h2>
|
||
<div class="codeblock mb-3">
|
||
<button class="btn btn-sm btn-outline-secondary copy-btn" data-copy-target="#r1"><i class="bi bi-clipboard"></i> Copy</button>
|
||
<pre class="terminal mb-0"><code id="r1">cspresso https://example.com --max-pages 10</code></pre>
|
||
</div>
|
||
<div class="text-secondary">
|
||
Start here, then audit the output. Crawls won’t cover every flow (auth-only pages, conditional loads, A/B tests, etc.).
|
||
</div>
|
||
</div>
|
||
|
||
<div class="col-lg-6">
|
||
<h2 class="section-title fw-bold">Headed debugging</h2>
|
||
<div class="codeblock mb-3">
|
||
<button class="btn btn-sm btn-outline-secondary copy-btn" data-copy-target="#r2"><i class="bi bi-clipboard"></i> Copy</button>
|
||
<pre class="terminal mb-0"><code id="r2">cspresso https://example.com --headed --settle-ms 2500</code></pre>
|
||
</div>
|
||
<div class="text-secondary">
|
||
Useful when the site does delayed loads or you want to visually confirm what’s happening during the crawl.
|
||
</div>
|
||
</div>
|
||
|
||
<div class="col-lg-6">
|
||
<h2 class="section-title fw-bold">Sourcemaps & <code>connect-src</code></h2>
|
||
<div class="codeblock mb-3">
|
||
<button class="btn btn-sm btn-outline-secondary copy-btn" data-copy-target="#r3"><i class="bi bi-clipboard"></i> Copy</button>
|
||
<pre class="terminal mb-0"><code id="r3">cspresso https://example.com --include-sourcemaps</code></pre>
|
||
</div>
|
||
<div class="text-secondary">
|
||
If browsers/devtools fetch <code>*.map</code> files from a CDN, this helps make sure the CDN origin lands in <code>connect-src</code>.
|
||
</div>
|
||
</div>
|
||
|
||
<div class="col-lg-6">
|
||
<h2 class="section-title fw-bold">Upgrade insecure requests</h2>
|
||
<div class="codeblock mb-3">
|
||
<button class="btn btn-sm btn-outline-secondary copy-btn" data-copy-target="#r4"><i class="bi bi-clipboard"></i> Copy</button>
|
||
<pre class="terminal mb-0"><code id="r4">cspresso https://example.com --upgrade-insecure-requests</code></pre>
|
||
</div>
|
||
<div class="text-secondary">
|
||
Handy during migrations when you still have a few stray HTTP URLs.
|
||
</div>
|
||
</div>
|
||
|
||
<div class="col-lg-6">
|
||
<h2 class="section-title fw-bold">AppImage (writable browser cache)</h2>
|
||
<div class="codeblock mb-3">
|
||
<button class="btn btn-sm btn-outline-secondary copy-btn" data-copy-target="#r5"><i class="bi bi-clipboard"></i> Copy</button>
|
||
<pre class="terminal mb-0"><code id="r5">./cspresso.AppImage https://example.com \
|
||
--browsers-path "$HOME/.cache/cspresso/pw-browsers"</code></pre>
|
||
</div>
|
||
<div class="text-secondary">
|
||
AppImages mount read-only. Set <code>--browsers-path</code> so Playwright can install Chromium into a writable directory.
|
||
</div>
|
||
</div>
|
||
|
||
<div class="col-lg-6">
|
||
<h2 class="section-title fw-bold">CI gate with <code>--evaluate</code></h2>
|
||
<div class="codeblock mb-3">
|
||
<button class="btn btn-sm btn-outline-secondary copy-btn" data-copy-target="#r6"><i class="bi bi-clipboard"></i> Copy</button>
|
||
<pre class="terminal mb-0"><code id="r6">cspresso https://example.com \
|
||
--bypass-csp \
|
||
--evaluate "default-src 'self'; script-src 'self' https://cdn.jsdelivr.net;" \
|
||
--json</code></pre>
|
||
</div>
|
||
<div class="text-secondary">
|
||
Exits <code>1</code> if the candidate policy would be violated - great for PR checks.
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</main>
|
||
|
||
<footer class="py-5 mt-5">
|
||
<div class="container">
|
||
<div class="row g-4">
|
||
<div class="col-12 col-md-6">
|
||
<div class="d-flex align-items-center gap-2 mb-2">
|
||
<img class="brand-mark" src="assets/img/cspresso.svg" alt="cspresso">
|
||
<div class="fw-bold">cspresso (a mig5 project)</div>
|
||
</div>
|
||
<div class="smallprint">
|
||
Crawl a site with headless Chromium, observe what loads, and emit a draft Content-Security-Policy.
|
||
Review and tighten before enforcing.
|
||
</div>
|
||
</div>
|
||
|
||
<div class="col-6 col-md-3">
|
||
<div class="fw-semibold mb-2">Pages</div>
|
||
<div class="d-flex flex-column gap-1">
|
||
<a href="docs.html" class="link-secondary text-decoration-none">Docs</a>
|
||
<a href="recipes.html" class="link-secondary text-decoration-none">Recipes</a>
|
||
<a href="evaluate.html" class="link-secondary text-decoration-none">Evaluate</a>
|
||
<a href="security.html" class="link-secondary text-decoration-none">Security</a>
|
||
</div>
|
||
</div>
|
||
|
||
<div class="col-6 col-md-3">
|
||
<div class="fw-semibold mb-2">Project</div>
|
||
<div class="d-flex flex-column gap-1">
|
||
<a href="https://git.mig5.net/mig5/cspresso" target="_blank" rel="noreferrer" class="link-secondary text-decoration-none">Repo</a>
|
||
<a href="https://pypi.org/project/cspresso/" target="_blank" rel="noreferrer" class="link-secondary text-decoration-none">PyPI</a>
|
||
<a href="https://git.mig5.net/mig5/cspresso/releases" target="_blank" rel="noreferrer" class="link-secondary text-decoration-none">Releases</a>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
<hr class="my-4">
|
||
|
||
<div class="d-flex flex-wrap justify-content-between gap-2 small text-secondary">
|
||
<div>© 2026 <a href="https://mig5.net" target="_blank" rel="noopener noreferrer">mig5 system administration</a></div>
|
||
</div>
|
||
</div>
|
||
</footer>
|
||
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"></script>
|
||
<script src="assets/js/site.js"></script>
|
||
</body>
|
||
</html>
|