Skip to content
Sanmopia Modernization

Astro CSP

Switch to Zen Mode

Astro CSP is validated by production build and preview.

Rule

Section titled “Rule”

Use hash-based CSP. Avoid unsafe-inline. Any external asset source must be explicitly listed and reviewed.

Development Binding

Section titled “Development Binding”

Frontend scripts must not hardcode bind addresses or ports.

Allowed runtime env:

  • ASTRO_DEV_HOST
  • ASTRO_DEV_PORT
  • ASTRO_PREVIEW_HOST
  • ASTRO_PREVIEW_PORT
  • ASTRO_HOST
  • ASTRO_PORT

Development stage routing is owned by assembly Traefik labels and Mutagen forwarding.