RFC: Local CSP - Githubissues

gluon-framework / gluon

A new framework for creating desktop apps from websites, using system installed browsers and NodeJS

https://gluonjs.org

MIT License

3.1k stars 76 forks source link

RFC: Local CSP #45

Closed CanadaHonk closed 1 year ago

CanadaHonk commented 1 year ago

Apps using Local (giving a path to Gluon.open()) should have a way of having CSP easily by default, without being annoying or intrusive for development.

My current thoughts is to have a csp option to Gluon.open() for Local, with options like:

none: No (Gluon set) CSP
local: Gluon Local-only CSP
<custom>: Sets CSP header to other custom value given

CanadaHonk commented 1 year ago

Done with new localCSP option for 0.13