Dan Harrin
Implementing Content Security Policy Headers
Since v3 is not accepting feature requests, I would not merge it into there. I would be open to a v4 PR but do not expect it to be reviewed before v4 is released unless it introduces breaking changes.
People have attempted this before, and failed. You may be able to get a very loose CSP config working. But you will not be able to get unsafe-eval, inline styles, etc working because Livewire does not support CSP.
38 replies