Update next.config.js (#900)

poac-dev · Nov 27, 2023 · 7c60f9e · 7c60f9e
1 parent 3e649cb
commit 7c60f9e
Showing 1 changed file with 9 additions and 2 deletions.
diff --git a/next.config.js b/next.config.js
@@ -1,11 +1,18 @@
 /** @type {import('next').NextConfig} */
 const path = require("path");
 
-const ContentSecurityPolicy = `
+const isDev = process.env.NODE_ENV === 'development';
+
+let ContentSecurityPolicy = `
   default-src 'self';
+  connect-src 'self' vitals.vercel-insights.com;`;
+
+ContentSecurityPolicy += isDev ? `
   script-src 'self' 'unsafe-eval' 'unsafe-inline';
   style-src 'self' 'unsafe-inline';
-  connect-src 'self' vitals.vercel-insights.com;
+` : `
+  script-src 'self';
+  style-src 'self';
 `;
 
 const securityHeaders = [