Commits on May 16, 2022

1. Upgraded es-module-shims to v1.5.5 …

   The current version of es-module-shims provided
   by importmap-rails (v1.4.6) requires allowing
   `frame-src: blob:` in an app's CSP policy (it
   creates an iframe with a blob as it's source
   in order to perform feature detection). This is
   quite a permissive thing to allow in csp and
   I wouldn't recommend it if there is an alternative.
   
   Since v1.4.7 es-module-shims no longer uses a
   blob and it will work with `script-src: 'self'`
   instead. I've upgraded to the latest version,
   which is v1.5.5. For more details about the
   CSP issue and it's fix see:
   
   * guybedford/es-module-shims#265
   * guybedford/es-module-shims#290

   

   iainbeeston committed May 16, 2022
   Configuration menu

   • View commit details
   • Copy full SHA for 29ea3b5
   • Browse repository at this point

   Copy the full SHA

   29ea3b5 View commit details

   Browse the repository at this point in the history