diff --git a/src/cspDirectives.ts b/src/cspDirectives.ts index e72845b..3c8b544 100644 --- a/src/cspDirectives.ts +++ b/src/cspDirectives.ts @@ -12,7 +12,7 @@ export const rootDomain = PUBLIC_DOMAIN; // or your server IP for dev const directives = { 'base-uri': ["'self'"], - 'child-src': ["'self'"], + 'child-src': ["'self'", 'blob:'], // 'connect-src': ["'self'", 'ws://localhost:*'], 'connect-src': [ "'self'", diff --git a/src/hooks.server.ts b/src/hooks.server.ts index c8c7d3a..edb6b0b 100644 --- a/src/hooks.server.ts +++ b/src/hooks.server.ts @@ -25,7 +25,7 @@ export const cspHandle: Handle = async ({ event, resolve }) => { const headers = { 'X-Frame-Options': 'SAMEORIGIN', 'Referrer-Policy': 'no-referrer', - 'Permissions-Policy': `accelerometer=(), autoplay=(), camera=(), document-domain=(), encrypted-media=(), fullscreen=(self ${rootDomain}), gyroscope=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), sync-xhr=(), usb=(), xr-spatial-tracking=(), geolocation=()`, + 'Permissions-Policy': `accelerometer=(), autoplay=(), camera=(), document-domain=(self, 'js-profiling'), encrypted-media=(), fullscreen=(self ${rootDomain}), gyroscope=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), sync-xhr=(), usb=(), xr-spatial-tracking=(), geolocation=()`, 'X-Content-Type-Options': 'nosniff', // 'Content-Security-Policy-Report-Only': csp, 'Content-Security-Policy': csp, diff --git a/vite.config.ts b/vite.config.ts index 93839a5..3c18393 100644 --- a/vite.config.ts +++ b/vite.config.ts @@ -12,15 +12,23 @@ export default defineConfig({ envPrefix: "PUBLIC_", plugins: [sentrySvelteKit({ sourceMapsUploadOptions: { - org: "none-b0c3fadae", - project: "javascript-sveltekit" + org: "mattmor", + project: "kkosmetickysalon", + + //telemetry off + telemetry: false, } - }), sveltekit(), purgeCss({ + }), + sveltekit(), + purgeCss({ safelist: { // any selectors that begin with "hljs-" will not be purged greedy: [/^hljs-/], }, -})], + })], + define: { + 'process.env.VITE_BUILD_TIME': JSON.stringify(new Date().toISOString()), + }, test: { include: ['src/**/*.{test,spec}.{js,ts}'] },