Skip to content

Conversation

@ematipico
Copy link
Member

Changes

Updates the JS docs for all CSP fields.

@sarah11918 FYI in the website we decided to "merge" hashes and resources, but here we can't do that, so I used the same content for both occurrences and updated the copy to include only the relevant information e.g. styleDirectives.hashes -> style-src

Testing

N/A

Docs

/cc @withastro/maintainers-docs for feedback!

@changeset-bot
Copy link

changeset-bot bot commented Dec 12, 2025

⚠️ No Changeset found

Latest commit: 49f29b3

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@ematipico ematipico changed the title chore: changeset chore: update docs references of csp Dec 12, 2025
@github-actions
Copy link
Contributor

github-actions bot commented Dec 12, 2025

⚠️ Package Trust Level Decreased

Caution

Decreased trust levels may indicate a higher risk of supply chain attacks. Please review these changes carefully.

📦 Package 🔒 Before 🔓 After
@cloudflare/unenv-preset trusted-with-provenance none
workerd trusted-with-provenance none
undici provenance none
miniflare trusted-with-provenance none
youch provenance none
@cloudflare/workerd-darwin-64 trusted-with-provenance none
@cloudflare/workerd-darwin-arm64 trusted-with-provenance none
@cloudflare/workerd-linux-64 trusted-with-provenance none
@cloudflare/workerd-linux-arm64 trusted-with-provenance none
@cloudflare/workerd-windows-64 trusted-with-provenance none
wrangler trusted-with-provenance none

@github-actions github-actions bot added pkg: astro Related to the core `astro` package (scope) docs pr labels Dec 12, 2025
Copy link
Member

@sarah11918 sarah11918 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I hope this worked! 😅

I had to reorder some things (move Vite around etc.) and I added the content for the main security.csp entry that we have in docs right now.

I think this is good, or at least close. Anything that needs fixing from here, I think Team Docs can handle as it will be just syntax to get it to render properly.

Thank you!

@github-actions github-actions bot added pkg: svelte Related to Svelte (scope) pkg: example Related to an example package (scope) pkg: integration Related to any renderer integration (scope) labels Dec 12, 2025
@ematipico ematipico force-pushed the docs/update-csp-reference branch from e75abfe to 49f29b3 Compare December 12, 2025 17:26
@github-actions github-actions bot removed pkg: svelte Related to Svelte (scope) pkg: example Related to an example package (scope) pkg: integration Related to any renderer integration (scope) labels Dec 12, 2025
@ematipico ematipico merged commit 9da7a0f into next Dec 12, 2025
23 checks passed
@ematipico ematipico deleted the docs/update-csp-reference branch December 12, 2025 17:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

docs pr pkg: astro Related to the core `astro` package (scope)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants