chrome-extension-boilerplate-react icon indicating copy to clipboard operation
chrome-extension-boilerplate-react copied to clipboard

Building with Content Security Policy

Open evantlee opened this issue 5 years ago • 3 comments

I'm curious if you've experimented with any solutions to allow for using a hashed SHA256 CSP rather than including unsafe-eval as this is highly discouraged according to Google's documentation. Using create-react-app this can be achieved by including INLINE_RUNTIME_CHUNK=false in .env I believe, but am not experienced enough with webpack to really know how a workaround can be built into this project. Have you worked on this at all? Any ideas on where to begin to build around this?

evantlee avatar Aug 05 '20 23:08 evantlee

Would also be interested in an alternative to unsafe-eval.

joshmillgate avatar Oct 28 '20 21:10 joshmillgate

Me too. Any updates on this?

Edduard avatar Apr 15 '22 15:04 Edduard

Any Update?

KrishEnacton avatar Jul 04 '22 08:07 KrishEnacton