@appsemble/lang-sdk 0.36.7 → 0.36.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@appsemble/lang-sdk",
-  "version": "0.36.7",
+  "version": "0.36.8",
   "description": "Language SDK for Appsemble",
   "keywords": [
     "app",

package/schemas/AppDefinition.js

@@ -91,6 +91,19 @@ The most basic resource has a \`schema\` property and defines the minimal securi
         theme: {
             $ref: '#/components/schemas/Theme',
         },
+        contentSecurityPolicy: {
+            type: 'object',
+            description: `Additional CSP source expressions for the published app page.
+
+If specified, Appsemble applies a stricter default CSP for broad directives such as \`connect-src\`,
+\`img-src\`, \`media-src\`, \`font-src\`, and \`object-src\`. The configured source expressions
+are then appended per directive.
+`,
+            additionalProperties: {
+                type: 'array',
+                items: { type: 'string' },
+            },
+        },
         cron: {
             type: 'object',
             minProperties: 1,

package/types/core.d.ts

@@ -11,6 +11,7 @@ import { type Security } from './security.js';
 import { type Theme } from './theme.js';
 import { type PageLayoutDefinition } from './gridLayout.js';
 export type SettingName = 'email' | 'languages' | 'name' | 'password' | 'phoneNumber' | 'picture';
+export type AppContentSecurityPolicy = Record<string, string[]>;
 export interface AppDefinition {
     /**
      * The name of the app.
@@ -133,6 +134,14 @@ export interface AppDefinition {
      * The global theme for the app.
      */
     theme?: Partial<Theme>;
+    /**
+     * Extra content security policy source expressions for the published app page.
+     *
+     * If specified, the published app page uses a stricter default CSP for broad directives such as
+     * `connect-src`, `img-src`, `media-src`, `font-src`, and `object-src`. The configured sources
+     * are then appended per directive.
+     */
+    contentSecurityPolicy?: AppContentSecurityPolicy;
     /**
      * Helper property that can be used to store YAML anchors.
      *