chore: Add content security policy headers to dev server and index.html

ideacrew · May 6, 2024 · 687d7a5 · 687d7a5
1 parent 98b07f1
commit 687d7a5
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/apps/sbtcc/project.json b/apps/sbtcc/project.json
@@ -58,6 +58,9 @@
     "serve": {
       "executor": "@angular-devkit/build-angular:dev-server",
       "options": {
+        "headers": {
+          "content-security-policy": "default-src 'self'; script-src 'self' 'nonce-randomNonceGoesHere'; style-src 'self' 'nonce-randomNonceGoesHere';"
+        },
         "port": 4202
       },
       "configurations": {

diff --git a/apps/sbtcc/src/index.html b/apps/sbtcc/src/index.html
@@ -2,6 +2,7 @@
 <html lang="en">
   <head>
     <meta charset="utf-8" />
+    <meta name="CSP_NONCE" content="randomNonceGoesHere" />
     <title>Small Business Tax Credit Calculator</title>
     <base href="/" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
@@ -18,6 +19,6 @@
     />
   </head>
   <body class="mat-typography">
-    <sbtcc-root />
+    <sbtcc-root ngCspNonce="randomNonceGoesHere" />
   </body>
 </html>