From cb361d835ffa399bea706098565aa82a1a3ff442 Mon Sep 17 00:00:00 2001
From: "Minh Phan (Paul)" <phanminh65@gmail.com>
Date: Fri, 6 Sep 2024 16:35:26 +0700
Subject: [PATCH] Update csp configs

---
 app/entry.server.tsx | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/app/entry.server.tsx b/app/entry.server.tsx
index 42cfc55b..6104e9b6 100644
--- a/app/entry.server.tsx
+++ b/app/entry.server.tsx
@@ -40,7 +40,8 @@ export default async function handleRequest(
   }
 
   responseHeaders.set("Content-Type", "text/html");
-  responseHeaders.set("Content-Security-Policy", header);
+  // TODO: change to Content-Security-Policy when you ready with your CSP configs.
+  responseHeaders.set("Content-Security-Policy-Report-Only", header);
   return new Response(body, {
     headers: responseHeaders,
     status: responseStatusCode,