git.gladyson/openmonetis
1
0
Fork 1
mirror of https://github.com/felipegcoutinho/openmonetis.git synced 2026-05-09 11:01:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(csp): permitir unsafe-eval apenas em desenvolvimento

Browse Source 
React precisa de eval() em dev para reconstruir stack traces.
Produção continua sem unsafe-eval.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Felipe Coutinho
2026-04-04 03:21:03 +00:00
parent df996df93d
commit 85f6dcfc22
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
next.config.ts
View File

@@ -4,6 +4,8 @@ import type { NextConfig } from "next";
// Carregar variáveis de ambiente explicitamente // Carregar variáveis de ambiente explicitamente
dotenv.config(); dotenv.config();
const isDev = process.env.NODE_ENV === "development";
const nextConfig: NextConfig = { const nextConfig: NextConfig = {
output: "standalone", output: "standalone",
cacheComponents: true, cacheComponents: true,
@@ -46,7 +48,7 @@ const nextConfig: NextConfig = {
key: "Content-Security-Policy", key: "Content-Security-Policy",
value: [ value: [
"default-src 'self'", "default-src 'self'",
"script-src 'self' 'unsafe-inline' https://umami.felipecoutinho.com", `script-src 'self' 'unsafe-inline'${isDev ? " 'unsafe-eval'" : ""} https://umami.felipecoutinho.com`,
"style-src 'self' 'unsafe-inline'", "style-src 'self' 'unsafe-inline'",
"img-src 'self' https://lh3.googleusercontent.com data: blob:", "img-src 'self' https://lh3.googleusercontent.com data: blob:",
"font-src 'self'", "font-src 'self'",