When <script>
elements referring to cross-origin resources do not include the type="module"
annotation or the integrity
attribute, Astro/Vite might decide to create a new module that imports the original resource, instead of leaving the original reference.
This can be problematic because of how the CSP script-src
is constructed. While we look for a more permanent and solid workaround, this problem should be properly documented in the documentation site.
Pay now to fund the work behind this issue.
Get updates on progress being made.
Maintainer is rewarded once the issue is completed.
You're funding impactful open source efforts
You want to contribute to this effort
You want to get funding like this too