client-web umbau
This commit is contained in:
@@ -0,0 +1,14 @@
|
|||||||
|
// Content Security Policy configuration for development
|
||||||
|
// More relaxed CSP suitable for development environment
|
||||||
|
config.devServer = config.devServer || {};
|
||||||
|
config.devServer.headers = config.devServer.headers || {};
|
||||||
|
config.devServer.headers['Content-Security-Policy'] =
|
||||||
|
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob:; " +
|
||||||
|
"script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob:; " +
|
||||||
|
"style-src 'self' 'unsafe-inline' data: blob:; " +
|
||||||
|
"img-src 'self' data: blob: http: https:; " +
|
||||||
|
"font-src 'self' data: blob: http: https:; " +
|
||||||
|
"connect-src 'self' ws: wss: http: https:; " +
|
||||||
|
"frame-src 'self' data: blob:; " +
|
||||||
|
"object-src 'none'; " +
|
||||||
|
"base-uri 'self';";
|
||||||
Reference in New Issue
Block a user