CSP (Content-Security-Policy) Vite Plugin

![version](https://github.com/josh-hemphill/vite-plugin-csp/releases)
![NPM](https://npmjs.org/package/vite-plugin-csp)
![Codecov](https://codecov.io/gh/josh-hemphill/vite-plugin-csp)
![Libraries.io dependency status for latest release](https://libraries.io/npm/vite-plugin-csp)
![Rate on Openbase](https://openbase.io/js/vite-plugin-csp?utm_source=embedded&utm_medium=badge&utm_campaign=rate-badge)
![Test](https://github.com/josh-hemphill/vite-plugin-csp/actions/workflows/test.yml)
![Release](https://github.com/josh-hemphill/vite-plugin-csp/actions/workflows/release.yml)

Leverages csp-typed-directives to create typed CSP policies and validated interdependant headers.
e.g. the CSP, CSP Report-Only, Report-To, and Referrer-Policy headers.

Mostly config compatible with csp-html-webpack-plugin

WARNING, STILL EARLY AND THINGS LIKE MODULE RESOLUTION ARE FINICKY

$3

Installation

Install the plugin with npm:

``shell $ npm install --save-dev vite-plugin-csp

`Or shorthand`


npm i -D vite-plugin-csp


Known issues

- Relative modules are resolved relative to the CWD, not the file - no SSR support (and thus no nonce support) - No parsing of JS embeded sources (since that would require framework specific plugins) - Onlyscript and style related directives are supported (except for the inclusion of report-to for generating headers)

`Under construction :)`

`CSP (Content-Security-Policy) Vite Plugin`

![version](https://github.com/josh-hemphill/vite-plugin-csp/releases) ![NPM](https://npmjs.org/package/vite-plugin-csp) ![Codecov](https://codecov.io/gh/josh-hemphill/vite-plugin-csp) ![Libraries.io dependency status for latest release](https://libraries.io/npm/vite-plugin-csp) ![Rate on Openbase](https://openbase.io/js/vite-plugin-csp?utm_source=embedded&utm_medium=badge&utm_campaign=rate-badge) ![Test](https://github.com/josh-hemphill/vite-plugin-csp/actions/workflows/test.yml) ![Release](https://github.com/josh-hemphill/vite-plugin-csp/actions/workflows/release.yml)

Leverages csp-typed-directives to create typed CSP policies and validated interdependant headers. e.g. the CSP, CSP Report-Only, Report-To, and Referrer-Policy headers.

Mostly config compatible with csp-html-webpack-plugin

`WARNING, STILL EARLY AND THINGS LIKE MODULE RESOLUTION ARE FINICKY`

`$3`

`Installation`

Install the plugin with npm:

``shell $ npm install --save-dev vite-plugin-csp

`Or shorthand`


npm i -D vite-plugin-csp
`
Known issues
  - Relative modules are resolved relative to the CWD, not the file
  - no SSR support (and thus no nonce support)
  - No parsing of JS embeded sources (since that would require framework specific plugins)
  - Only script and style related directives are supported (except for the inclusion of report-to for generating headers)
Under construction :)