search

bejamas / gatsby-plugin-csp

A Gatsby plugin which adds strict Content Security Policy to your project.
MIT License
38 stars 15 forks source link

Status of this plugin / repo? #24

Open Primajin opened 2 years ago

Primajin commented 2 years ago

Hey it looks like this repo is a bit abandoned - is this still under active development?

👻

thomkrupa commented 1 year ago

Hey! We're planning a bigger update soon to fix all the issues and make it work with the newer Gatsby versions.

Vacilando commented 1 year ago

Any ETA?

JerzyDamian commented 1 year ago

Hey! We're planning a bigger update soon to fix all the issues and make it work with the newer Gatsby versions.

Good news! After upgrade to Gatsby v5, this plugin is not working correctly anymore... We need updates ASAP :) Any hope?

gdams commented 1 year ago

Please can someone pick the maintenance of this repo back up? This is broken for some time now

Primajin commented 1 year ago

@JerzyDamian / @gdams do you know where it breaks in particular? It seems to work ok for me still under Gatsby 5 - maybe it's a special configuration I can help with?

gdams commented 1 year ago

I think it's the change from helmet to Gatsby head that breaks things

Primajin commented 1 year ago

Ahh I see, I am still using helmet, since Gatsby head can't update things during runtime only compile time

gdams commented 1 year ago

Yeah I think helmet has been deprecated for some time now

Primajin commented 1 year ago

Yeah I think helmet has been deprecated for some time now

Ah what a pity.

However for this CSP plugin I don't see a lot of use cases where one would want to change the CSP in runtime - so a fixed/static CSP via the new Gatsby head API should offer a viable option and reduces dependency as it comes out of the box.