15 lines
709 B
Plaintext
15 lines
709 B
Plaintext
// Content Security Policy configuration for development
|
|
// More relaxed CSP suitable for development environment
|
|
config.devServer = config.devServer || {};
|
|
config.devServer.headers = config.devServer.headers || {};
|
|
config.devServer.headers['Content-Security-Policy'] =
|
|
"default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob:; " +
|
|
"script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob:; " +
|
|
"style-src 'self' 'unsafe-inline' data: blob:; " +
|
|
"img-src 'self' data: blob: http: https:; " +
|
|
"font-src 'self' data: blob: http: https:; " +
|
|
"connect-src 'self' ws: wss: http: https:; " +
|
|
"frame-src 'self' data: blob:; " +
|
|
"object-src 'none'; " +
|
|
"base-uri 'self';";
|