chore(web-landing): remove CSP header

deeptech-kmitl · Jan 8, 2024 · b7f7451 · b7f7451
1 parent e788bfd
commit b7f7451
Showing 1 changed file with 0 additions and 16 deletions.
diff --git a/apps/web/landing/src/routes/plugin@csp.ts b/apps/web/landing/src/routes/plugin@csp.ts
@@ -6,20 +6,4 @@ export const onRequest: RequestHandler = (event) => {
 
   const nonce = event.request.headers.get('cf-ray');
   event.sharedMap.set('@nonce', nonce);
-
-  const { hostname: rootFragmentHostname } = new URL(import.meta.env.VITE_ROOT_FRAGMENT_URL);
-
-  const csp = [
-    `default-src 'self' 'unsafe-inline' *.${rootFragmentHostname}`,
-    "font-src 'self' https://fonts.gstatic.com",
-    "img-src 'self' 'unsafe-inline' data:",
-    `script-src 'self' 'unsafe-inline' https: 'nonce-${nonce}' 'strict-dynamic'`,
-    "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com",
-    `frame-src 'self' 'nonce-${nonce}'`,
-    "object-src 'none'",
-    "base-uri 'self'",
-  ];
-
-  event.headers.set('Content-Security-Policy', csp.join('; '));
 };
-;