Vite CSP support #454
dargmuesli
started this conversation in
Ideas
Replies: 1 comment 9 replies
-
Hey @dargmuesli Thanks for this interesting idea! I like where this js going but I would wait for @vejja who is our expert in this area to share his feedback :) |
Beta Was this translation helpful? Give feedback.
9 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hey @vejja,
I think we can add a meta header that resolves issues with Vite and CSP now:
property="csp-nonce" nonce="..."
(docs)nuxt-security/src/runtime/nitro/plugins/80-cspSsrNonce.ts
Line 23 in 8305b48
maybe in a style similar to this:
nuxt-security/src/runtime/nitro/plugins/60-cspSsgHashes.ts
Line 108 in 8305b48
I haven't used cheerio before, therefore I'm not sure.
nuxt-security/docs/content/1.documentation/2.headers/1.csp.md
Line 222 in 8305b48
What do you think? 🎉
cc @Baroshem of course
Beta Was this translation helpful? Give feedback.
All reactions