Remove unsafe-inline from style-src for strict dynamic (#1951)

clerk · Jan 29, 2025 · e9abc61 · e9abc61
1 parent 1d003bb
commit e9abc61
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/docs/security/clerk-csp.mdx b/docs/security/clerk-csp.mdx
@@ -82,7 +82,7 @@ function applyCsp(request) {
     connect-src 'self' https://{{fapi_url}};
     img-src 'self' https://img.clerk.com;
     worker-src 'self' blob:;
-    style-src 'self' 'unsafe-inline';
+    style-src 'self';
     frame-src 'self' https://challenges.cloudflare.com;
     form-action 'self';
   `