Vite Plugin CSP Guard

This is a well tested Vite Plugin that allows you to declare your Content Security Policy (CSP) for your Vite project. First class support for SPA's

Documentation

Full documentation and helpful guides are available here.

Installation

1npm install -D vite-plugin-csp-guard
2# or
3yarn add -D vite-plugin-csp-guard
4# or
5pnpm add -D vite-plugin-csp-guard

Basic Usage

1// vite.config.ts
2import { defineConfig } from "vite";
3import csp from "vite-plugin-csp-guard";
4
5export default defineConfig({
6  plugins: [
7    csp({
8      algorithm: "sha256", // The algorithm to use for hashing
9      dev: {
10        run: true, // If you want to run the plugin in `vite dev` mode
11      },
12      policy: {
13        // Specify the policy here.
14        "script-src": ["'self'", "https://www.google-analytics.com"], // Example: Allow Google Analytics
15        "style-src": ["'self'", "https://fonts.googleapis.com"], // Example: Allow Google Fonts
16      },
17    }),
18  ],
19});