angular-cli icon indicating copy to clipboard operation
angular-cli copied to clipboard

feat(@angular/build): Auto-CSP support as an index file transformation.

Open aaronshim opened this issue 1 year ago • 0 comments

Auto-CSP is a feature to rewrite the <script> tags in a index.html file to either hash their contents or rewrite them as a dynamic loader script that can be hashed. These hashes will be placed in a CSP inside a <meta> tag inside the <head> of the document to ensure that the scripts running on the page are those known during the compile-time of the client-side rendered application.

PR Checklist

Please check to confirm your PR fulfills the following requirements:

  • [X] The commit message follows our guidelines: https://github.com/angular/angular-cli/blob/main/CONTRIBUTING.md#-commit-message-guidelines
  • [X] Tests for the changes have been added (for bug fixes / features)
  • [ ] Docs have been added / updated (for bug fixes / features)

PR Type

What kind of change does this PR introduce?

  • [ ] Bugfix
  • [X] Feature
  • [ ] Code style update (formatting, local variables)
  • [ ] Refactoring (no functional changes, no api changes)
  • [X] Build related changes
  • [ ] CI related changes
  • [ ] Documentation content changes
  • [ ] Other... Please describe:

What is the current behavior?

Issue Number: N/A

What is the new behavior?

Does this PR introduce a breaking change?

  • [ ] Yes
  • [X] No

Other information

aaronshim avatar Oct 15 '24 09:10 aaronshim