remove style-src 'unsafe-inline' :)

Author: iliana

vercel.json

@@ -7,7 +7,7 @@
       "headers": [
         {
           "key": "content-security-policy",
-          "value": "default-src 'self'; style-src 'unsafe-inline' 'self'; frame-src 'none'; object-src 'none'; form-action 'none'; frame-ancestors 'none'"
+          "value": "default-src 'self'; frame-src 'none'; object-src 'none'; form-action 'none'; frame-ancestors 'none'"
         },
         { "key": "x-content-type-options", "value": "nosniff" },
         { "key": "x-frame-options", "value": "DENY" }

vite.config.ts

@@ -82,7 +82,7 @@ const cspNonce = randomBytes(8).toString('hex')
 const csp = headers['content-security-policy']
 const devHeaders = {
   ...headers,
-  'content-security-policy': `${csp}; script-src 'nonce-${cspNonce}' 'self'`,
+  'content-security-policy': `${csp}; script-src 'nonce-${cspNonce}' 'self'; style-src 'nonce-${cspNonce}' 'self'`,
 }
 
 // see https://vitejs.dev/config/