Merge pull request #488 from Baroshem/feat/#487

feat-#487: local dev with nuxt devtools
Baroshem · Jul 16, 2024 · 88dbb4c · 88dbb4c
2 parents b7701f1 + 338be11
commit 88dbb4c
Show file tree

Hide file tree

Showing 3 changed files with 1 addition and 17 deletions.
diff --git a/docs/content/1.documentation/1.getting-started/1.setup.md b/docs/content/1.documentation/1.getting-started/1.setup.md
@@ -24,18 +24,3 @@ security: {
 ```
 
 You can find more about configuring `nuxt-security` [here](/documentation/getting-started/configuration).
-
-## Using with Nuxt DevTools
-
-In order to make this module work with Nuxt DevTools add following configuration to your projects:
-
-```js{}[nuxt.config.ts]
-export default defineNuxtConfig({
-  modules: ['nuxt-security', '@nuxt/devtools'],
-  security: {
-    headers: {
-      crossOriginEmbedderPolicy: process.env.NODE_ENV === 'development' ? 'unsafe-none' : 'require-corp',
-    },
-  },
-});
-```
diff --git a/playground/nuxt.config.ts b/playground/nuxt.config.ts
@@ -48,7 +48,6 @@ export default defineNuxtConfig({
   // Global configuration
   security: {
     headers: {
-      crossOriginEmbedderPolicy: false,
       xXSSProtection: '0'
     },
     rateLimiter: {

diff --git a/src/defaultConfig.ts b/src/defaultConfig.ts
@@ -9,7 +9,7 @@ export const defaultSecurityConfig = (serverlUrl: string, strict: boolean) => {
     headers: {
       crossOriginResourcePolicy: 'same-origin',
       crossOriginOpenerPolicy: 'same-origin',
-      crossOriginEmbedderPolicy: 'credentialless',
+      crossOriginEmbedderPolicy: process.env.NODE_ENV === 'development' ? 'unsafe-none' : 'credentialless',
       contentSecurityPolicy: {
         'base-uri': ["'none'"],
         'font-src': ["'self'", 'https:', 'data:'],