sveltejs / svelte-devtools

A browser extension to inspect Svelte application by extending your browser devtools capabilities
https://chromewebstore.google.com/detail/svelte-devtools/kfidecgcdjjfpeckbblhmfkhmlgecoff
MIT License
1.44k stars 78 forks source link

Add notice in "Not working?" panel about restrictive csp in sveltekit blocking the extension from working #76

Closed cmcculloh-kr closed 12 months ago

cmcculloh-kr commented 2 years ago

If you completely lock down your app and add:

        csp: {
            directives: {
                'script-src': ['self']
            }
        },

to your kit config, it will block the extension from working.

Adding a bullet point asking if they are using an overly restrictive csp in svelte-kit would point this out to them.

https://kit.svelte.dev/docs/configuration#csp