feat(web): add CSP reduce DOM attack surface

deeptech-kmitl · Jan 2, 2024 · 451f3fc · 451f3fc
1 parent af3b3a2
commit 451f3fc
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/apps/web/src/routes/plugin@csp.ts b/apps/web/src/routes/plugin@csp.ts
@@ -16,6 +16,7 @@ export const onRequest: RequestHandler = (event) => {
     `frame-src 'self' 'nonce-${nonce}'`,
     `object-src 'none'`,
     `base-uri 'self'`,
+    `require-trusted-types-for 'script'`
   ];
 
   event.headers.set("Content-Security-Policy", csp.join("; "));