[BUG]: Error in browser console: report-only Content Security Policy '' was delivered via a <meta> element, which is disallowed.

[amits97]

The following error is showing up in the browser when using vite-plugin-csp:

The report-only Content Security Policy '' was delivered via a <meta> element, which is disallowed. The policy has been ignored.

Is there a way to remove the Content-Security-Policy-Report-Only meta tag from the page?

Thanks

[amits97]

Update: was able to remove the Content-Security-Policy-Report-Only meta tag using processFns:

cspPlugin({
  policy: {
    ...
  },
  processFn: [
    (ctx, parsedHeaders) => {
      delete parsedHeaders['Content-Security-Policy-Report-Only'];   // <-- remove from parsedHeaders
    },
  ],
})

Not sure if I like it, but it works 😀

[github-actions]

🎉 This issue has been resolved in version 1.1.0 🎉

The release is available on:

• GitHub release
• npm package (@latest dist-tag)

Your semantic-release bot 📦🚀

[amits97]

@josh-hemphill Thank you so much for working on an update so fast! Appreciate it 😊

However, when I updated vite-plugin-csp to 1.1.0, I'm seeing the following error:

failed to load config from /Users/amitsn/workspace/seller-panel/packages/seller-panel/vite.config.mjs
error when starting dev server:
file:///Users/amitsn/workspace/seller-panel/node_modules/vite-plugin-csp/dist/index.js:20

...

SyntaxError: The requested module 'css-tree' does not provide an export named 'default'
    at ModuleJob._instantiate (node:internal/modules/esm/module_job:128:21)
    at async ModuleJob.run (node:internal/modules/esm/module_job:194:5)
    at async Promise.all (index 0)
    at async ESMLoader.import (node:internal/modules/esm/loader:385:24)
    at async importModuleDynamicallyWrapper (node:internal/vm/module:437:15)
    at async loadConfigFromFile (/Users/amitsn/workspace/seller-panel/node_modules/vite/dist/node/chunks/dep-e1fc1d62.js:61903:31)
    at async resolveConfig (/Users/amitsn/workspace/seller-panel/node_modules/vite/dist/node/chunks/dep-e1fc1d62.js:61436:28)
    at async createServer (/Users/amitsn/workspace/seller-panel/node_modules/vite/dist/node/chunks/dep-e1fc1d62.js:59843:20)
    at async CAC.<anonymous> (/Users/amitsn/workspace/seller-panel/node_modules/vite/dist/node/cli.js:688:24)

[josh-hemphill]

It should be fixed now. Let me know if you run into issues

[amits97]

Perfect! Works well now. Thank you 😊