fix(security): remove unsafe-eval from CSP script-src
- commit
- 53e8e1e5a0b84ffe655a7bf9536fe35b6a830853
- author
- Kit · · 2026-02-16 11:04 UTC
- parent
- 77eb01c
- signature
- SSH Unverified
SHA256:H91DFuEG4jpk5edzLA4aUKkpv4zv9Q339ipRmkph6TkThe key is unknown
1 file · +1 -1
M svelte.config.js +1 -1
| @@ -16,7 +16,7 @@ const config = { | |||
| 16 | 16 | mode: 'auto', | |
| 17 | 17 | directives: { | |
| 18 | 18 | 'default-src': ['self'], | |
| 19 | - | 'script-src': ['self', 'https://challenges.cloudflare.com', 'unsafe-eval'], | |
| 19 | + | 'script-src': ['self', 'https://challenges.cloudflare.com'], | |
| 20 | 20 | 'style-src': ['self', 'unsafe-inline'], | |
| 21 | 21 | 'img-src': ['self', 'data:', 'blob:'], | |
| 22 | 22 | 'connect-src': [ | |
| @@ -16,7 +16,7 @@ const config = { | |||||
| 16 | mode: 'auto', | 16 | mode: 'auto', | ||
| 17 | directives: { | 17 | directives: { | ||
| 18 | 'default-src': ['self'], | 18 | 'default-src': ['self'], | ||
| 19 | - | 'script-src': ['self', 'https://challenges.cloudflare.com', 'unsafe-eval'], | 19 | + | 'script-src': ['self', 'https://challenges.cloudflare.com'], |
| 20 | 'style-src': ['self', 'unsafe-inline'], | 20 | 'style-src': ['self', 'unsafe-inline'], | ||
| 21 | 'img-src': ['self', 'data:', 'blob:'], | 21 | 'img-src': ['self', 'data:', 'blob:'], | ||
| 22 | 'connect-src': [ | 22 | 'connect-src': [ | ||