Skip to content

Instantly share code, notes, and snippets.

@manutheblacker

manutheblacker/csp-rule.js

Created September 14, 2025 05:35
Show Gist options
  • Save manutheblacker/53d90007e5726d1e822aa1b19982a147 to your computer and use it in GitHub Desktop.
Save manutheblacker/53d90007e5726d1e822aa1b19982a147 to your computer and use it in GitHub Desktop.
Download ZIP
csp-rule.js
Raw
csp-rule.js
csp: dev ? undefined : {
mode: 'nonce', // Required for SvelteKit to inject nonces automatically
directives: {
'default-src': ["'self'"],
'script-src': ["'self'", 'strict-dynamic', 'https://ajax.cloudflare.com', 'static.cloudflareinsights.com', 'https://challenges.cloudflare.com', 'https://cdnjs.cloudflare.com', 'https://browser-update.org'],
'style-src': ["'self'",'unsafe-inline','https://cdn.jsdelivr.net', 'https://cdnjs.cloudflare.com'],
'img-src': ["'self'", 'data:', 'blob:', 'https://placehold.co', 'https://avatars.githubusercontent.com', 'https://cdn.jsdelivr.net', 'https://ui-avatars.com'],
'connect-src': ["'self'", 'cloudflareinsights.com', 'https://www.google-analytics.com', 'https://www.googletagmanager.com/'],
'font-src': ["'self'"],
'frame-src':["'self'",'cloudflareinsights.com', 'https://challenges.cloudflare.com', 'https://www.googletagmanager.com/' ],
'frame-ancestors': ["'none'"],
'base-uri': ["'self'"],
'form-action': ["'self'"],
'object-src': ["'none'"],
'require-trusted-types-for': ["'script'"],
'script-src-elem' : ["'self'", 'https://challenges.cloudflare.com', , 'https://cdnjs.cloudflare.com', 'https://browser-update.org' ]
},
reportOnly: {
'require-trusted-types-for': ["'script'"],
'frame-src':["'self'",'cloudflareinsights.com', 'https://challenges.cloudflare.com' ],
'script-src': ['self', 'strict-dynamic', 'https://ajax.cloudflare.com', 'static.cloudflareinsights.com','https://challenges.cloudflare.com'],
'report-uri': []
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment