Apps using Local (giving a path to Gluon.open()) should have a way of having CSP easily by default, without being annoying or intrusive for development.
My current thoughts is to have a csp option to Gluon.open() for Local, with options like:
none: No (Gluon set) CSP
local: Gluon Local-only CSP
<custom>: Sets CSP header to other custom value given
Apps using Local (giving a path to
Gluon.open()
) should have a way of having CSP easily by default, without being annoying or intrusive for development.My current thoughts is to have a
csp
option toGluon.open()
for Local, with options like:none
: No (Gluon set) CSPlocal
: Gluon Local-only CSP<custom>
: Sets CSP header to other custom value given