The dependency vaul that was recently added to Compound Web causes an inline style sheet to be added to the document, which is problematic for consumers of our components that want to tighten their CSP to disallow inline style-src. We should figure out a way to get its style sheet to be bundled differently, possibly by contributing a fix upstream.
Platform
Web
Package version
v0.9.4
Description
The dependency
vaul
that was recently added to Compound Web causes an inline style sheet to be added to the document, which is problematic for consumers of our components that want to tighten their CSP to disallow inline style-src. We should figure out a way to get its style sheet to be bundled differently, possibly by contributing a fix upstream.