From 34d95454b35712e4c1119f02693f2e2e9cda8cc8 Mon Sep 17 00:00:00 2001 From: taehoon Date: Tue, 25 Jun 2019 12:34:30 -0400 Subject: [PATCH] add csp header to dev server --- build/dev-server.js | 3 +++ 1 file changed, 3 insertions(+) diff --git a/build/dev-server.js b/build/dev-server.js index 48574214..59dd2c4d 100644 --- a/build/dev-server.js +++ b/build/dev-server.js @@ -24,6 +24,9 @@ var devMiddleware = require('webpack-dev-middleware')(compiler, { stats: { colors: true, chunks: false + }, + headers: { + 'content-security-policy': "base-uri 'self'; frame-ancestors 'none'; img-src 'self' data: https:; media-src 'self' https:; style-src 'self' 'unsafe-inline'; font-src 'self'; manifest-src 'self'; script-src 'self' 'unsafe-eval';" } })