Unrecognized Content-Security-Policy directive 'undefined'.

[marcaureln]

Version

nuxt-security: 1.0.0-rc.4
nuxt: 3.7.4

Steps to reproduce

nuxt.config.ts

export default defineNuxtConfig({
  ...
  modules: ['nuxt-security'],
  security: {
    headers: {
      crossOriginOpenerPolicy: false,
      crossOriginEmbedderPolicy: false,
      contentSecurityPolicy: false,
    },
  },
...
});

What is Expected?

This warning shouldn't be printed in the browser console because contentSecurityPolicy is set to false.

What is actually happening?

Got: Unrecognized Content-Security-Policy directive 'undefined'. in browser console.

[vejja]

@marcaureln You're right
Also related: #292

PR #304 will fix
For now you can set contentSecurityPolicy: '' to avoid the console warning

[marcaureln]

Thanks @vejja !

The empty string didn't fix it. But tried ' ' (single space) and the warning vanish. Can't wait to use the upcoming release.

[Baroshem]

@vejja Thanks guys for finding and solving it!

Aiming to release it with 1.0.0-rc.5 soon :)