refactor: disable csp by default

Configuring CSP correctly requires time and patience, so enabling it right away is too much to ask from someone when they are not even worrying about CSP at all
adonisjs · Mar 6, 2020 · 4003532 · 4003532
1 parent 310e713
commit 4003532
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/templates/shield.txt b/templates/shield.txt
@@ -21,8 +21,11 @@ export const csp: ShieldConfig['csp'] = {
   |--------------------------------------------------------------------------
   | Enable/disable CSP
   |--------------------------------------------------------------------------
+  |
+  | The CSP rules are disabled by default for seamless onboarding.
+  |
   */
-  enabled: true,
+  enabled: false,
 
   /*
   |--------------------------------------------------------------------------