https://github.com/rodneylab/sveltekit-content-security-policy

SvelteKit Content Security Policy: how you can add CSP to reduce your Svelte site's cross-site scripting (XSS) attack surface.
https://github.com/rodneylab/sveltekit-content-security-policy

cloudflare-pages content-security-policy csp http-headers netlify svelte svelte3 sveltekit

Last synced: 29 days ago
JSON representation

SvelteKit Content Security Policy: how you can add CSP to reduce your Svelte site's cross-site scripting (XSS) attack surface.

• Host: GitHub
• URL: https://github.com/rodneylab/sveltekit-content-security-policy
• Owner: rodneylab
• License: bsd-3-clause
• Created: 2022-06-22T11:35:01.000Z (over 2 years ago)
• Default Branch: main
• Last Pushed: 2023-10-05T07:01:56.000Z (about 1 year ago)
• Last Synced: 2024-09-29T11:58:07.603Z (about 1 month ago)
• Topics: cloudflare-pages, content-security-policy, csp, http-headers, netlify, svelte, svelte3, sveltekit
• Language: Svelte
• Homepage:
• Size: 2.99 MB
• Stars: 5
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • Contributing: .github/CONTRIBUTING.md
  • License: LICENSE
  • Code of conduct: CODE_OF_CONDUCT.md
  • Security: .github/SECURITY.md

Awesome Lists containing this project

README

        




  

    

  





  SvelteKit Content Security Policy



# sveltekit-content-security-policy

[![Open in StackBlitz](https://developer.stackblitz.com/img/open_in_stackblitz.svg)](https://stackblitz.com/github/rodneylab/sveltekit-content-security-policy)

How you can generate Content Security Policy HTTP Headers for your static SvelteKit site deployed to Netlify or Cloudflare Pages. The code accompanies the post on SvelteKit content security policy. If you have any questions, please drop a comment at the bottom of that page.

## Building and previewing the site

If you're seeing this, you've probably already done this step. Congrats!

```bash

git clone https://github.com/rodneylab/sveltekit-content-security-policy.git

cd sveltekit-content-security-policy

pnpm install # or npm install

pnpm dev

```

## Building

```bash

pnpm build

```

> You can preview the built app with `pnpm run preview`, regardless of whether you installed an adapter. This should _not_ be used to serve your app in production.

Feel free to jump into the [Rodney Lab matrix chat room](https://matrix.to/#/%23rodney:matrix.org).