client-web umbau

2025-09-10 15:13:11 +02:00
parent fb37c3a64a
commit 8b5bf73de2
1 changed files with 14 additions and 0 deletions
@@ -0,0 +1,14 @@
+// Content Security Policy configuration for development
+// More relaxed CSP suitable for development environment
+config.devServer = config.devServer || {};
+config.devServer.headers = config.devServer.headers || {};
+config.devServer.headers['Content-Security-Policy'] =
+    "default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob:; " +
+    "script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob:; " +
+    "style-src 'self' 'unsafe-inline' data: blob:; " +
+    "img-src 'self' data: blob: http: https:; " +
+    "font-src 'self' data: blob: http: https:; " +
+    "connect-src 'self' ws: wss: http: https:; " +
+    "frame-src 'self' data: blob:; " +
+    "object-src 'none'; " +
+    "base-uri 'self';";