@appwarden/middleware 3.11.3 → 3.11.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (10) hide show
  1. package/{chunk-4ADGOFLV.js → chunk-5HCAAVK5.js} +1 -0
  2. package/cloudflare/astro.d.ts +2 -2
  3. package/cloudflare/nextjs.d.ts +2 -2
  4. package/cloudflare/react-router.d.ts +2 -2
  5. package/cloudflare/tanstack-start.d.ts +2 -2
  6. package/cloudflare.d.ts +315 -0
  7. package/cloudflare.js +2 -2
  8. package/index.d.ts +315 -0
  9. package/index.js +1 -1
  10. package/package.json +1 -3
package/{chunk-4ADGOFLV.js → chunk-5HCAAVK5.js} RENAMED
@@ -20,6 +20,7 @@ var AppwardenMultidomainConfigSchema = z.record(
20
20
  var UseAppwardenInputSchema = z.object({
21
21
  debug: BooleanSchema.default(false),
22
22
  lockPageSlug: z.string().optional(),
23
+ contentSecurityPolicy: z.lazy(() => UseCSPInputSchema).optional(),
23
24
  multidomainConfig: AppwardenMultidomainConfigSchema.optional(),
24
25
  appwardenApiToken: AppwardenApiTokenSchema,
25
26
  appwardenApiHostname: AppwardenApiHostnameSchema.optional()
package/cloudflare/astro.d.ts CHANGED
@@ -270,8 +270,8 @@ declare const AstroCloudflareConfigSchema: z.ZodObject<{
270
270
  };
271
271
  }>>>;
272
272
  }, "strip", z.ZodTypeAny, {
273
- debug: boolean;
274
273
  lockPageSlug: string;
274
+ debug: boolean;
275
275
  appwardenApiToken: string;
276
276
  contentSecurityPolicy?: {
277
277
  mode: "disabled" | "report-only" | "enforced";
@@ -308,7 +308,6 @@ declare const AstroCloudflareConfigSchema: z.ZodObject<{
308
308
  }, {
309
309
  lockPageSlug: string;
310
310
  appwardenApiToken: string;
311
- debug?: string | boolean | undefined;
312
311
  contentSecurityPolicy?: {
313
312
  mode: "disabled" | "report-only" | "enforced";
314
313
  directives: string | {
@@ -340,6 +339,7 @@ declare const AstroCloudflareConfigSchema: z.ZodObject<{
340
339
  "require-trusted-types-for"?: string | boolean | string[] | undefined;
341
340
  };
342
341
  } | undefined;
342
+ debug?: string | boolean | undefined;
343
343
  appwardenApiHostname?: string | undefined;
344
344
  }>;
345
345
  type AstroCloudflareConfig = z.infer<typeof AstroCloudflareConfigSchema>;
package/cloudflare/nextjs.d.ts CHANGED
@@ -329,8 +329,8 @@ declare const NextJsCloudflareConfigSchema: z.ZodObject<{
329
329
  };
330
330
  }>>>;
331
331
  }, "strip", z.ZodTypeAny, {
332
- debug: boolean;
333
332
  lockPageSlug: string;
333
+ debug: boolean;
334
334
  appwardenApiToken: string;
335
335
  contentSecurityPolicy?: {
336
336
  mode: "disabled" | "report-only" | "enforced";
@@ -367,7 +367,6 @@ declare const NextJsCloudflareConfigSchema: z.ZodObject<{
367
367
  }, {
368
368
  lockPageSlug: string;
369
369
  appwardenApiToken: string;
370
- debug?: string | boolean | undefined;
371
370
  contentSecurityPolicy?: {
372
371
  mode: "disabled" | "report-only" | "enforced";
373
372
  directives: string | {
@@ -399,6 +398,7 @@ declare const NextJsCloudflareConfigSchema: z.ZodObject<{
399
398
  "require-trusted-types-for"?: string | boolean | string[] | undefined;
400
399
  };
401
400
  } | undefined;
401
+ debug?: string | boolean | undefined;
402
402
  appwardenApiHostname?: string | undefined;
403
403
  }>;
404
404
  type NextJsCloudflareConfig = z.infer<typeof NextJsCloudflareConfigSchema>;
package/cloudflare/react-router.d.ts CHANGED
@@ -268,8 +268,8 @@ declare const ReactRouterCloudflareConfigSchema: z.ZodObject<{
268
268
  };
269
269
  }>>>;
270
270
  }, "strip", z.ZodTypeAny, {
271
- debug: boolean;
272
271
  lockPageSlug: string;
272
+ debug: boolean;
273
273
  appwardenApiToken: string;
274
274
  contentSecurityPolicy?: {
275
275
  mode: "disabled" | "report-only" | "enforced";
@@ -306,7 +306,6 @@ declare const ReactRouterCloudflareConfigSchema: z.ZodObject<{
306
306
  }, {
307
307
  lockPageSlug: string;
308
308
  appwardenApiToken: string;
309
- debug?: string | boolean | undefined;
310
309
  contentSecurityPolicy?: {
311
310
  mode: "disabled" | "report-only" | "enforced";
312
311
  directives: string | {
@@ -338,6 +337,7 @@ declare const ReactRouterCloudflareConfigSchema: z.ZodObject<{
338
337
  "require-trusted-types-for"?: string | boolean | string[] | undefined;
339
338
  };
340
339
  } | undefined;
340
+ debug?: string | boolean | undefined;
341
341
  appwardenApiHostname?: string | undefined;
342
342
  }>;
343
343
  type ReactRouterCloudflareConfig = z.infer<typeof ReactRouterCloudflareConfigSchema>;
package/cloudflare/tanstack-start.d.ts CHANGED
@@ -268,8 +268,8 @@ declare const TanStackStartCloudflareConfigSchema: z.ZodObject<{
268
268
  };
269
269
  }>>>;
270
270
  }, "strip", z.ZodTypeAny, {
271
- debug: boolean;
272
271
  lockPageSlug: string;
272
+ debug: boolean;
273
273
  appwardenApiToken: string;
274
274
  contentSecurityPolicy?: {
275
275
  mode: "disabled" | "report-only" | "enforced";
@@ -306,7 +306,6 @@ declare const TanStackStartCloudflareConfigSchema: z.ZodObject<{
306
306
  }, {
307
307
  lockPageSlug: string;
308
308
  appwardenApiToken: string;
309
- debug?: string | boolean | undefined;
310
309
  contentSecurityPolicy?: {
311
310
  mode: "disabled" | "report-only" | "enforced";
312
311
  directives: string | {
@@ -338,6 +337,7 @@ declare const TanStackStartCloudflareConfigSchema: z.ZodObject<{
338
337
  "require-trusted-types-for"?: string | boolean | string[] | undefined;
339
338
  };
340
339
  } | undefined;
340
+ debug?: string | boolean | undefined;
341
341
  appwardenApiHostname?: string | undefined;
342
342
  }>;
343
343
  type TanStackStartCloudflareConfig = z.infer<typeof TanStackStartCloudflareConfigSchema>;
package/cloudflare.d.ts CHANGED
@@ -4,6 +4,259 @@ import { z } from 'zod';
4
4
  declare const ConfigFnInputSchema: z.ZodFunction<z.ZodTuple<[z.ZodType<RequestContext, z.ZodTypeDef, RequestContext>], z.ZodUnknown>, z.ZodLazy<z.ZodEffects<z.ZodObject<{
5
5
  debug: z.ZodDefault<z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodBoolean]>>, boolean, string | boolean | undefined>>;
6
6
  lockPageSlug: z.ZodOptional<z.ZodString>;
7
+ contentSecurityPolicy: z.ZodOptional<z.ZodLazy<z.ZodObject<{
8
+ mode: z.ZodUnion<[z.ZodLiteral<"disabled">, z.ZodLiteral<"report-only">, z.ZodLiteral<"enforced">]>;
9
+ directives: z.ZodEffects<z.ZodEffects<z.ZodUnion<[z.ZodString, z.ZodObject<{
10
+ "default-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
11
+ "script-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
12
+ "style-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
13
+ "img-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
14
+ "connect-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
15
+ "font-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
16
+ "object-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
17
+ "media-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
18
+ "frame-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
19
+ sandbox: z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
20
+ "report-uri": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
21
+ "child-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
22
+ "form-action": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
23
+ "frame-ancestors": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
24
+ "plugin-types": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
25
+ "base-uri": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
26
+ "report-to": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
27
+ "worker-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
28
+ "manifest-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
29
+ "prefetch-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
30
+ "navigate-to": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
31
+ "require-sri-for": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
32
+ "block-all-mixed-content": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
33
+ "upgrade-insecure-requests": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
34
+ "trusted-types": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
35
+ "require-trusted-types-for": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
36
+ }, "strip", z.ZodTypeAny, {
37
+ "default-src"?: string | boolean | string[] | undefined;
38
+ "script-src"?: string | boolean | string[] | undefined;
39
+ "style-src"?: string | boolean | string[] | undefined;
40
+ "img-src"?: string | boolean | string[] | undefined;
41
+ "connect-src"?: string | boolean | string[] | undefined;
42
+ "font-src"?: string | boolean | string[] | undefined;
43
+ "object-src"?: string | boolean | string[] | undefined;
44
+ "media-src"?: string | boolean | string[] | undefined;
45
+ "frame-src"?: string | boolean | string[] | undefined;
46
+ sandbox?: string | boolean | string[] | undefined;
47
+ "report-uri"?: string | boolean | string[] | undefined;
48
+ "child-src"?: string | boolean | string[] | undefined;
49
+ "form-action"?: string | boolean | string[] | undefined;
50
+ "frame-ancestors"?: string | boolean | string[] | undefined;
51
+ "plugin-types"?: string | boolean | string[] | undefined;
52
+ "base-uri"?: string | boolean | string[] | undefined;
53
+ "report-to"?: string | boolean | string[] | undefined;
54
+ "worker-src"?: string | boolean | string[] | undefined;
55
+ "manifest-src"?: string | boolean | string[] | undefined;
56
+ "prefetch-src"?: string | boolean | string[] | undefined;
57
+ "navigate-to"?: string | boolean | string[] | undefined;
58
+ "require-sri-for"?: string | boolean | string[] | undefined;
59
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
60
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
61
+ "trusted-types"?: string | boolean | string[] | undefined;
62
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
63
+ }, {
64
+ "default-src"?: string | boolean | string[] | undefined;
65
+ "script-src"?: string | boolean | string[] | undefined;
66
+ "style-src"?: string | boolean | string[] | undefined;
67
+ "img-src"?: string | boolean | string[] | undefined;
68
+ "connect-src"?: string | boolean | string[] | undefined;
69
+ "font-src"?: string | boolean | string[] | undefined;
70
+ "object-src"?: string | boolean | string[] | undefined;
71
+ "media-src"?: string | boolean | string[] | undefined;
72
+ "frame-src"?: string | boolean | string[] | undefined;
73
+ sandbox?: string | boolean | string[] | undefined;
74
+ "report-uri"?: string | boolean | string[] | undefined;
75
+ "child-src"?: string | boolean | string[] | undefined;
76
+ "form-action"?: string | boolean | string[] | undefined;
77
+ "frame-ancestors"?: string | boolean | string[] | undefined;
78
+ "plugin-types"?: string | boolean | string[] | undefined;
79
+ "base-uri"?: string | boolean | string[] | undefined;
80
+ "report-to"?: string | boolean | string[] | undefined;
81
+ "worker-src"?: string | boolean | string[] | undefined;
82
+ "manifest-src"?: string | boolean | string[] | undefined;
83
+ "prefetch-src"?: string | boolean | string[] | undefined;
84
+ "navigate-to"?: string | boolean | string[] | undefined;
85
+ "require-sri-for"?: string | boolean | string[] | undefined;
86
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
87
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
88
+ "trusted-types"?: string | boolean | string[] | undefined;
89
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
90
+ }>]>, string | {
91
+ "default-src"?: string | boolean | string[] | undefined;
92
+ "script-src"?: string | boolean | string[] | undefined;
93
+ "style-src"?: string | boolean | string[] | undefined;
94
+ "img-src"?: string | boolean | string[] | undefined;
95
+ "connect-src"?: string | boolean | string[] | undefined;
96
+ "font-src"?: string | boolean | string[] | undefined;
97
+ "object-src"?: string | boolean | string[] | undefined;
98
+ "media-src"?: string | boolean | string[] | undefined;
99
+ "frame-src"?: string | boolean | string[] | undefined;
100
+ sandbox?: string | boolean | string[] | undefined;
101
+ "report-uri"?: string | boolean | string[] | undefined;
102
+ "child-src"?: string | boolean | string[] | undefined;
103
+ "form-action"?: string | boolean | string[] | undefined;
104
+ "frame-ancestors"?: string | boolean | string[] | undefined;
105
+ "plugin-types"?: string | boolean | string[] | undefined;
106
+ "base-uri"?: string | boolean | string[] | undefined;
107
+ "report-to"?: string | boolean | string[] | undefined;
108
+ "worker-src"?: string | boolean | string[] | undefined;
109
+ "manifest-src"?: string | boolean | string[] | undefined;
110
+ "prefetch-src"?: string | boolean | string[] | undefined;
111
+ "navigate-to"?: string | boolean | string[] | undefined;
112
+ "require-sri-for"?: string | boolean | string[] | undefined;
113
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
114
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
115
+ "trusted-types"?: string | boolean | string[] | undefined;
116
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
117
+ }, string | {
118
+ "default-src"?: string | boolean | string[] | undefined;
119
+ "script-src"?: string | boolean | string[] | undefined;
120
+ "style-src"?: string | boolean | string[] | undefined;
121
+ "img-src"?: string | boolean | string[] | undefined;
122
+ "connect-src"?: string | boolean | string[] | undefined;
123
+ "font-src"?: string | boolean | string[] | undefined;
124
+ "object-src"?: string | boolean | string[] | undefined;
125
+ "media-src"?: string | boolean | string[] | undefined;
126
+ "frame-src"?: string | boolean | string[] | undefined;
127
+ sandbox?: string | boolean | string[] | undefined;
128
+ "report-uri"?: string | boolean | string[] | undefined;
129
+ "child-src"?: string | boolean | string[] | undefined;
130
+ "form-action"?: string | boolean | string[] | undefined;
131
+ "frame-ancestors"?: string | boolean | string[] | undefined;
132
+ "plugin-types"?: string | boolean | string[] | undefined;
133
+ "base-uri"?: string | boolean | string[] | undefined;
134
+ "report-to"?: string | boolean | string[] | undefined;
135
+ "worker-src"?: string | boolean | string[] | undefined;
136
+ "manifest-src"?: string | boolean | string[] | undefined;
137
+ "prefetch-src"?: string | boolean | string[] | undefined;
138
+ "navigate-to"?: string | boolean | string[] | undefined;
139
+ "require-sri-for"?: string | boolean | string[] | undefined;
140
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
141
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
142
+ "trusted-types"?: string | boolean | string[] | undefined;
143
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
144
+ }>, {
145
+ "default-src"?: string | boolean | string[] | undefined;
146
+ "script-src"?: string | boolean | string[] | undefined;
147
+ "style-src"?: string | boolean | string[] | undefined;
148
+ "img-src"?: string | boolean | string[] | undefined;
149
+ "connect-src"?: string | boolean | string[] | undefined;
150
+ "font-src"?: string | boolean | string[] | undefined;
151
+ "object-src"?: string | boolean | string[] | undefined;
152
+ "media-src"?: string | boolean | string[] | undefined;
153
+ "frame-src"?: string | boolean | string[] | undefined;
154
+ sandbox?: string | boolean | string[] | undefined;
155
+ "report-uri"?: string | boolean | string[] | undefined;
156
+ "child-src"?: string | boolean | string[] | undefined;
157
+ "form-action"?: string | boolean | string[] | undefined;
158
+ "frame-ancestors"?: string | boolean | string[] | undefined;
159
+ "plugin-types"?: string | boolean | string[] | undefined;
160
+ "base-uri"?: string | boolean | string[] | undefined;
161
+ "report-to"?: string | boolean | string[] | undefined;
162
+ "worker-src"?: string | boolean | string[] | undefined;
163
+ "manifest-src"?: string | boolean | string[] | undefined;
164
+ "prefetch-src"?: string | boolean | string[] | undefined;
165
+ "navigate-to"?: string | boolean | string[] | undefined;
166
+ "require-sri-for"?: string | boolean | string[] | undefined;
167
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
168
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
169
+ "trusted-types"?: string | boolean | string[] | undefined;
170
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
171
+ } | undefined, string | {
172
+ "default-src"?: string | boolean | string[] | undefined;
173
+ "script-src"?: string | boolean | string[] | undefined;
174
+ "style-src"?: string | boolean | string[] | undefined;
175
+ "img-src"?: string | boolean | string[] | undefined;
176
+ "connect-src"?: string | boolean | string[] | undefined;
177
+ "font-src"?: string | boolean | string[] | undefined;
178
+ "object-src"?: string | boolean | string[] | undefined;
179
+ "media-src"?: string | boolean | string[] | undefined;
180
+ "frame-src"?: string | boolean | string[] | undefined;
181
+ sandbox?: string | boolean | string[] | undefined;
182
+ "report-uri"?: string | boolean | string[] | undefined;
183
+ "child-src"?: string | boolean | string[] | undefined;
184
+ "form-action"?: string | boolean | string[] | undefined;
185
+ "frame-ancestors"?: string | boolean | string[] | undefined;
186
+ "plugin-types"?: string | boolean | string[] | undefined;
187
+ "base-uri"?: string | boolean | string[] | undefined;
188
+ "report-to"?: string | boolean | string[] | undefined;
189
+ "worker-src"?: string | boolean | string[] | undefined;
190
+ "manifest-src"?: string | boolean | string[] | undefined;
191
+ "prefetch-src"?: string | boolean | string[] | undefined;
192
+ "navigate-to"?: string | boolean | string[] | undefined;
193
+ "require-sri-for"?: string | boolean | string[] | undefined;
194
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
195
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
196
+ "trusted-types"?: string | boolean | string[] | undefined;
197
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
198
+ }>;
199
+ }, "strip", z.ZodTypeAny, {
200
+ mode: "disabled" | "report-only" | "enforced";
201
+ directives?: {
202
+ "default-src"?: string | boolean | string[] | undefined;
203
+ "script-src"?: string | boolean | string[] | undefined;
204
+ "style-src"?: string | boolean | string[] | undefined;
205
+ "img-src"?: string | boolean | string[] | undefined;
206
+ "connect-src"?: string | boolean | string[] | undefined;
207
+ "font-src"?: string | boolean | string[] | undefined;
208
+ "object-src"?: string | boolean | string[] | undefined;
209
+ "media-src"?: string | boolean | string[] | undefined;
210
+ "frame-src"?: string | boolean | string[] | undefined;
211
+ sandbox?: string | boolean | string[] | undefined;
212
+ "report-uri"?: string | boolean | string[] | undefined;
213
+ "child-src"?: string | boolean | string[] | undefined;
214
+ "form-action"?: string | boolean | string[] | undefined;
215
+ "frame-ancestors"?: string | boolean | string[] | undefined;
216
+ "plugin-types"?: string | boolean | string[] | undefined;
217
+ "base-uri"?: string | boolean | string[] | undefined;
218
+ "report-to"?: string | boolean | string[] | undefined;
219
+ "worker-src"?: string | boolean | string[] | undefined;
220
+ "manifest-src"?: string | boolean | string[] | undefined;
221
+ "prefetch-src"?: string | boolean | string[] | undefined;
222
+ "navigate-to"?: string | boolean | string[] | undefined;
223
+ "require-sri-for"?: string | boolean | string[] | undefined;
224
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
225
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
226
+ "trusted-types"?: string | boolean | string[] | undefined;
227
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
228
+ } | undefined;
229
+ }, {
230
+ mode: "disabled" | "report-only" | "enforced";
231
+ directives: string | {
232
+ "default-src"?: string | boolean | string[] | undefined;
233
+ "script-src"?: string | boolean | string[] | undefined;
234
+ "style-src"?: string | boolean | string[] | undefined;
235
+ "img-src"?: string | boolean | string[] | undefined;
236
+ "connect-src"?: string | boolean | string[] | undefined;
237
+ "font-src"?: string | boolean | string[] | undefined;
238
+ "object-src"?: string | boolean | string[] | undefined;
239
+ "media-src"?: string | boolean | string[] | undefined;
240
+ "frame-src"?: string | boolean | string[] | undefined;
241
+ sandbox?: string | boolean | string[] | undefined;
242
+ "report-uri"?: string | boolean | string[] | undefined;
243
+ "child-src"?: string | boolean | string[] | undefined;
244
+ "form-action"?: string | boolean | string[] | undefined;
245
+ "frame-ancestors"?: string | boolean | string[] | undefined;
246
+ "plugin-types"?: string | boolean | string[] | undefined;
247
+ "base-uri"?: string | boolean | string[] | undefined;
248
+ "report-to"?: string | boolean | string[] | undefined;
249
+ "worker-src"?: string | boolean | string[] | undefined;
250
+ "manifest-src"?: string | boolean | string[] | undefined;
251
+ "prefetch-src"?: string | boolean | string[] | undefined;
252
+ "navigate-to"?: string | boolean | string[] | undefined;
253
+ "require-sri-for"?: string | boolean | string[] | undefined;
254
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
255
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
256
+ "trusted-types"?: string | boolean | string[] | undefined;
257
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
258
+ };
259
+ }>>>;
7
260
  multidomainConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
8
261
  lockPageSlug: z.ZodString;
9
262
  contentSecurityPolicy: z.ZodOptional<z.ZodLazy<z.ZodObject<{
@@ -335,6 +588,37 @@ declare const ConfigFnInputSchema: z.ZodFunction<z.ZodTuple<[z.ZodType<RequestCo
335
588
  debug: boolean;
336
589
  appwardenApiToken: string;
337
590
  lockPageSlug?: string | undefined;
591
+ contentSecurityPolicy?: {
592
+ mode: "disabled" | "report-only" | "enforced";
593
+ directives?: {
594
+ "default-src"?: string | boolean | string[] | undefined;
595
+ "script-src"?: string | boolean | string[] | undefined;
596
+ "style-src"?: string | boolean | string[] | undefined;
597
+ "img-src"?: string | boolean | string[] | undefined;
598
+ "connect-src"?: string | boolean | string[] | undefined;
599
+ "font-src"?: string | boolean | string[] | undefined;
600
+ "object-src"?: string | boolean | string[] | undefined;
601
+ "media-src"?: string | boolean | string[] | undefined;
602
+ "frame-src"?: string | boolean | string[] | undefined;
603
+ sandbox?: string | boolean | string[] | undefined;
604
+ "report-uri"?: string | boolean | string[] | undefined;
605
+ "child-src"?: string | boolean | string[] | undefined;
606
+ "form-action"?: string | boolean | string[] | undefined;
607
+ "frame-ancestors"?: string | boolean | string[] | undefined;
608
+ "plugin-types"?: string | boolean | string[] | undefined;
609
+ "base-uri"?: string | boolean | string[] | undefined;
610
+ "report-to"?: string | boolean | string[] | undefined;
611
+ "worker-src"?: string | boolean | string[] | undefined;
612
+ "manifest-src"?: string | boolean | string[] | undefined;
613
+ "prefetch-src"?: string | boolean | string[] | undefined;
614
+ "navigate-to"?: string | boolean | string[] | undefined;
615
+ "require-sri-for"?: string | boolean | string[] | undefined;
616
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
617
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
618
+ "trusted-types"?: string | boolean | string[] | undefined;
619
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
620
+ } | undefined;
621
+ } | undefined;
338
622
  multidomainConfig?: Record<string, {
339
623
  lockPageSlug: string;
340
624
  debug?: boolean | undefined;
@@ -375,6 +659,37 @@ declare const ConfigFnInputSchema: z.ZodFunction<z.ZodTuple<[z.ZodType<RequestCo
375
659
  appwardenApiToken: string;
376
660
  debug?: string | boolean | undefined;
377
661
  lockPageSlug?: string | undefined;
662
+ contentSecurityPolicy?: {
663
+ mode: "disabled" | "report-only" | "enforced";
664
+ directives: string | {
665
+ "default-src"?: string | boolean | string[] | undefined;
666
+ "script-src"?: string | boolean | string[] | undefined;
667
+ "style-src"?: string | boolean | string[] | undefined;
668
+ "img-src"?: string | boolean | string[] | undefined;
669
+ "connect-src"?: string | boolean | string[] | undefined;
670
+ "font-src"?: string | boolean | string[] | undefined;
671
+ "object-src"?: string | boolean | string[] | undefined;
672
+ "media-src"?: string | boolean | string[] | undefined;
673
+ "frame-src"?: string | boolean | string[] | undefined;
674
+ sandbox?: string | boolean | string[] | undefined;
675
+ "report-uri"?: string | boolean | string[] | undefined;
676
+ "child-src"?: string | boolean | string[] | undefined;
677
+ "form-action"?: string | boolean | string[] | undefined;
678
+ "frame-ancestors"?: string | boolean | string[] | undefined;
679
+ "plugin-types"?: string | boolean | string[] | undefined;
680
+ "base-uri"?: string | boolean | string[] | undefined;
681
+ "report-to"?: string | boolean | string[] | undefined;
682
+ "worker-src"?: string | boolean | string[] | undefined;
683
+ "manifest-src"?: string | boolean | string[] | undefined;
684
+ "prefetch-src"?: string | boolean | string[] | undefined;
685
+ "navigate-to"?: string | boolean | string[] | undefined;
686
+ "require-sri-for"?: string | boolean | string[] | undefined;
687
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
688
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
689
+ "trusted-types"?: string | boolean | string[] | undefined;
690
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
691
+ };
692
+ } | undefined;
378
693
  multidomainConfig?: Record<string, {
379
694
  lockPageSlug: string;
380
695
  debug?: string | boolean | undefined;
package/cloudflare.js CHANGED
@@ -1,7 +1,7 @@
1
1
  import {
2
2
  UseAppwardenInputSchema,
3
3
  lockPageSlugRefinement
4
- } from "./chunk-4ADGOFLV.js";
4
+ } from "./chunk-5HCAAVK5.js";
5
5
  import {
6
6
  useContentSecurityPolicy
7
7
  } from "./chunk-WBWF3PPX.js";
@@ -136,7 +136,7 @@ var appwardenOnCloudflare = (inputFn) => async (request, env, ctx) => {
136
136
  useAppwarden({ ...input, debug: domainDebug }),
137
137
  useFetchOrigin()
138
138
  ];
139
- const cspConfig = input.multidomainConfig?.[requestUrl.hostname]?.contentSecurityPolicy;
139
+ const cspConfig = input.multidomainConfig?.[requestUrl.hostname]?.contentSecurityPolicy ?? input.contentSecurityPolicy;
140
140
  if (cspConfig) {
141
141
  pipeline.push(useContentSecurityPolicy(cspConfig));
142
142
  }
package/index.d.ts CHANGED
@@ -48,6 +48,259 @@ declare const isValidCacheUrl: {
48
48
  declare const UseAppwardenInputSchema: z.ZodObject<{
49
49
  debug: z.ZodDefault<z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodBoolean]>>, boolean, string | boolean | undefined>>;
50
50
  lockPageSlug: z.ZodOptional<z.ZodString>;
51
+ contentSecurityPolicy: z.ZodOptional<z.ZodLazy<z.ZodObject<{
52
+ mode: z.ZodUnion<[z.ZodLiteral<"disabled">, z.ZodLiteral<"report-only">, z.ZodLiteral<"enforced">]>;
53
+ directives: z.ZodEffects<z.ZodEffects<z.ZodUnion<[z.ZodString, z.ZodObject<{
54
+ "default-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
55
+ "script-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
56
+ "style-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
57
+ "img-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
58
+ "connect-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
59
+ "font-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
60
+ "object-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
61
+ "media-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
62
+ "frame-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
63
+ sandbox: z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
64
+ "report-uri": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
65
+ "child-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
66
+ "form-action": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
67
+ "frame-ancestors": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
68
+ "plugin-types": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
69
+ "base-uri": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
70
+ "report-to": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
71
+ "worker-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
72
+ "manifest-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
73
+ "prefetch-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
74
+ "navigate-to": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
75
+ "require-sri-for": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
76
+ "block-all-mixed-content": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
77
+ "upgrade-insecure-requests": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
78
+ "trusted-types": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
79
+ "require-trusted-types-for": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
80
+ }, "strip", z.ZodTypeAny, {
81
+ "default-src"?: string | boolean | string[] | undefined;
82
+ "script-src"?: string | boolean | string[] | undefined;
83
+ "style-src"?: string | boolean | string[] | undefined;
84
+ "img-src"?: string | boolean | string[] | undefined;
85
+ "connect-src"?: string | boolean | string[] | undefined;
86
+ "font-src"?: string | boolean | string[] | undefined;
87
+ "object-src"?: string | boolean | string[] | undefined;
88
+ "media-src"?: string | boolean | string[] | undefined;
89
+ "frame-src"?: string | boolean | string[] | undefined;
90
+ sandbox?: string | boolean | string[] | undefined;
91
+ "report-uri"?: string | boolean | string[] | undefined;
92
+ "child-src"?: string | boolean | string[] | undefined;
93
+ "form-action"?: string | boolean | string[] | undefined;
94
+ "frame-ancestors"?: string | boolean | string[] | undefined;
95
+ "plugin-types"?: string | boolean | string[] | undefined;
96
+ "base-uri"?: string | boolean | string[] | undefined;
97
+ "report-to"?: string | boolean | string[] | undefined;
98
+ "worker-src"?: string | boolean | string[] | undefined;
99
+ "manifest-src"?: string | boolean | string[] | undefined;
100
+ "prefetch-src"?: string | boolean | string[] | undefined;
101
+ "navigate-to"?: string | boolean | string[] | undefined;
102
+ "require-sri-for"?: string | boolean | string[] | undefined;
103
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
104
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
105
+ "trusted-types"?: string | boolean | string[] | undefined;
106
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
107
+ }, {
108
+ "default-src"?: string | boolean | string[] | undefined;
109
+ "script-src"?: string | boolean | string[] | undefined;
110
+ "style-src"?: string | boolean | string[] | undefined;
111
+ "img-src"?: string | boolean | string[] | undefined;
112
+ "connect-src"?: string | boolean | string[] | undefined;
113
+ "font-src"?: string | boolean | string[] | undefined;
114
+ "object-src"?: string | boolean | string[] | undefined;
115
+ "media-src"?: string | boolean | string[] | undefined;
116
+ "frame-src"?: string | boolean | string[] | undefined;
117
+ sandbox?: string | boolean | string[] | undefined;
118
+ "report-uri"?: string | boolean | string[] | undefined;
119
+ "child-src"?: string | boolean | string[] | undefined;
120
+ "form-action"?: string | boolean | string[] | undefined;
121
+ "frame-ancestors"?: string | boolean | string[] | undefined;
122
+ "plugin-types"?: string | boolean | string[] | undefined;
123
+ "base-uri"?: string | boolean | string[] | undefined;
124
+ "report-to"?: string | boolean | string[] | undefined;
125
+ "worker-src"?: string | boolean | string[] | undefined;
126
+ "manifest-src"?: string | boolean | string[] | undefined;
127
+ "prefetch-src"?: string | boolean | string[] | undefined;
128
+ "navigate-to"?: string | boolean | string[] | undefined;
129
+ "require-sri-for"?: string | boolean | string[] | undefined;
130
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
131
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
132
+ "trusted-types"?: string | boolean | string[] | undefined;
133
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
134
+ }>]>, string | {
135
+ "default-src"?: string | boolean | string[] | undefined;
136
+ "script-src"?: string | boolean | string[] | undefined;
137
+ "style-src"?: string | boolean | string[] | undefined;
138
+ "img-src"?: string | boolean | string[] | undefined;
139
+ "connect-src"?: string | boolean | string[] | undefined;
140
+ "font-src"?: string | boolean | string[] | undefined;
141
+ "object-src"?: string | boolean | string[] | undefined;
142
+ "media-src"?: string | boolean | string[] | undefined;
143
+ "frame-src"?: string | boolean | string[] | undefined;
144
+ sandbox?: string | boolean | string[] | undefined;
145
+ "report-uri"?: string | boolean | string[] | undefined;
146
+ "child-src"?: string | boolean | string[] | undefined;
147
+ "form-action"?: string | boolean | string[] | undefined;
148
+ "frame-ancestors"?: string | boolean | string[] | undefined;
149
+ "plugin-types"?: string | boolean | string[] | undefined;
150
+ "base-uri"?: string | boolean | string[] | undefined;
151
+ "report-to"?: string | boolean | string[] | undefined;
152
+ "worker-src"?: string | boolean | string[] | undefined;
153
+ "manifest-src"?: string | boolean | string[] | undefined;
154
+ "prefetch-src"?: string | boolean | string[] | undefined;
155
+ "navigate-to"?: string | boolean | string[] | undefined;
156
+ "require-sri-for"?: string | boolean | string[] | undefined;
157
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
158
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
159
+ "trusted-types"?: string | boolean | string[] | undefined;
160
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
161
+ }, string | {
162
+ "default-src"?: string | boolean | string[] | undefined;
163
+ "script-src"?: string | boolean | string[] | undefined;
164
+ "style-src"?: string | boolean | string[] | undefined;
165
+ "img-src"?: string | boolean | string[] | undefined;
166
+ "connect-src"?: string | boolean | string[] | undefined;
167
+ "font-src"?: string | boolean | string[] | undefined;
168
+ "object-src"?: string | boolean | string[] | undefined;
169
+ "media-src"?: string | boolean | string[] | undefined;
170
+ "frame-src"?: string | boolean | string[] | undefined;
171
+ sandbox?: string | boolean | string[] | undefined;
172
+ "report-uri"?: string | boolean | string[] | undefined;
173
+ "child-src"?: string | boolean | string[] | undefined;
174
+ "form-action"?: string | boolean | string[] | undefined;
175
+ "frame-ancestors"?: string | boolean | string[] | undefined;
176
+ "plugin-types"?: string | boolean | string[] | undefined;
177
+ "base-uri"?: string | boolean | string[] | undefined;
178
+ "report-to"?: string | boolean | string[] | undefined;
179
+ "worker-src"?: string | boolean | string[] | undefined;
180
+ "manifest-src"?: string | boolean | string[] | undefined;
181
+ "prefetch-src"?: string | boolean | string[] | undefined;
182
+ "navigate-to"?: string | boolean | string[] | undefined;
183
+ "require-sri-for"?: string | boolean | string[] | undefined;
184
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
185
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
186
+ "trusted-types"?: string | boolean | string[] | undefined;
187
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
188
+ }>, {
189
+ "default-src"?: string | boolean | string[] | undefined;
190
+ "script-src"?: string | boolean | string[] | undefined;
191
+ "style-src"?: string | boolean | string[] | undefined;
192
+ "img-src"?: string | boolean | string[] | undefined;
193
+ "connect-src"?: string | boolean | string[] | undefined;
194
+ "font-src"?: string | boolean | string[] | undefined;
195
+ "object-src"?: string | boolean | string[] | undefined;
196
+ "media-src"?: string | boolean | string[] | undefined;
197
+ "frame-src"?: string | boolean | string[] | undefined;
198
+ sandbox?: string | boolean | string[] | undefined;
199
+ "report-uri"?: string | boolean | string[] | undefined;
200
+ "child-src"?: string | boolean | string[] | undefined;
201
+ "form-action"?: string | boolean | string[] | undefined;
202
+ "frame-ancestors"?: string | boolean | string[] | undefined;
203
+ "plugin-types"?: string | boolean | string[] | undefined;
204
+ "base-uri"?: string | boolean | string[] | undefined;
205
+ "report-to"?: string | boolean | string[] | undefined;
206
+ "worker-src"?: string | boolean | string[] | undefined;
207
+ "manifest-src"?: string | boolean | string[] | undefined;
208
+ "prefetch-src"?: string | boolean | string[] | undefined;
209
+ "navigate-to"?: string | boolean | string[] | undefined;
210
+ "require-sri-for"?: string | boolean | string[] | undefined;
211
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
212
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
213
+ "trusted-types"?: string | boolean | string[] | undefined;
214
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
215
+ } | undefined, string | {
216
+ "default-src"?: string | boolean | string[] | undefined;
217
+ "script-src"?: string | boolean | string[] | undefined;
218
+ "style-src"?: string | boolean | string[] | undefined;
219
+ "img-src"?: string | boolean | string[] | undefined;
220
+ "connect-src"?: string | boolean | string[] | undefined;
221
+ "font-src"?: string | boolean | string[] | undefined;
222
+ "object-src"?: string | boolean | string[] | undefined;
223
+ "media-src"?: string | boolean | string[] | undefined;
224
+ "frame-src"?: string | boolean | string[] | undefined;
225
+ sandbox?: string | boolean | string[] | undefined;
226
+ "report-uri"?: string | boolean | string[] | undefined;
227
+ "child-src"?: string | boolean | string[] | undefined;
228
+ "form-action"?: string | boolean | string[] | undefined;
229
+ "frame-ancestors"?: string | boolean | string[] | undefined;
230
+ "plugin-types"?: string | boolean | string[] | undefined;
231
+ "base-uri"?: string | boolean | string[] | undefined;
232
+ "report-to"?: string | boolean | string[] | undefined;
233
+ "worker-src"?: string | boolean | string[] | undefined;
234
+ "manifest-src"?: string | boolean | string[] | undefined;
235
+ "prefetch-src"?: string | boolean | string[] | undefined;
236
+ "navigate-to"?: string | boolean | string[] | undefined;
237
+ "require-sri-for"?: string | boolean | string[] | undefined;
238
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
239
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
240
+ "trusted-types"?: string | boolean | string[] | undefined;
241
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
242
+ }>;
243
+ }, "strip", z.ZodTypeAny, {
244
+ mode: "disabled" | "report-only" | "enforced";
245
+ directives?: {
246
+ "default-src"?: string | boolean | string[] | undefined;
247
+ "script-src"?: string | boolean | string[] | undefined;
248
+ "style-src"?: string | boolean | string[] | undefined;
249
+ "img-src"?: string | boolean | string[] | undefined;
250
+ "connect-src"?: string | boolean | string[] | undefined;
251
+ "font-src"?: string | boolean | string[] | undefined;
252
+ "object-src"?: string | boolean | string[] | undefined;
253
+ "media-src"?: string | boolean | string[] | undefined;
254
+ "frame-src"?: string | boolean | string[] | undefined;
255
+ sandbox?: string | boolean | string[] | undefined;
256
+ "report-uri"?: string | boolean | string[] | undefined;
257
+ "child-src"?: string | boolean | string[] | undefined;
258
+ "form-action"?: string | boolean | string[] | undefined;
259
+ "frame-ancestors"?: string | boolean | string[] | undefined;
260
+ "plugin-types"?: string | boolean | string[] | undefined;
261
+ "base-uri"?: string | boolean | string[] | undefined;
262
+ "report-to"?: string | boolean | string[] | undefined;
263
+ "worker-src"?: string | boolean | string[] | undefined;
264
+ "manifest-src"?: string | boolean | string[] | undefined;
265
+ "prefetch-src"?: string | boolean | string[] | undefined;
266
+ "navigate-to"?: string | boolean | string[] | undefined;
267
+ "require-sri-for"?: string | boolean | string[] | undefined;
268
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
269
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
270
+ "trusted-types"?: string | boolean | string[] | undefined;
271
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
272
+ } | undefined;
273
+ }, {
274
+ mode: "disabled" | "report-only" | "enforced";
275
+ directives: string | {
276
+ "default-src"?: string | boolean | string[] | undefined;
277
+ "script-src"?: string | boolean | string[] | undefined;
278
+ "style-src"?: string | boolean | string[] | undefined;
279
+ "img-src"?: string | boolean | string[] | undefined;
280
+ "connect-src"?: string | boolean | string[] | undefined;
281
+ "font-src"?: string | boolean | string[] | undefined;
282
+ "object-src"?: string | boolean | string[] | undefined;
283
+ "media-src"?: string | boolean | string[] | undefined;
284
+ "frame-src"?: string | boolean | string[] | undefined;
285
+ sandbox?: string | boolean | string[] | undefined;
286
+ "report-uri"?: string | boolean | string[] | undefined;
287
+ "child-src"?: string | boolean | string[] | undefined;
288
+ "form-action"?: string | boolean | string[] | undefined;
289
+ "frame-ancestors"?: string | boolean | string[] | undefined;
290
+ "plugin-types"?: string | boolean | string[] | undefined;
291
+ "base-uri"?: string | boolean | string[] | undefined;
292
+ "report-to"?: string | boolean | string[] | undefined;
293
+ "worker-src"?: string | boolean | string[] | undefined;
294
+ "manifest-src"?: string | boolean | string[] | undefined;
295
+ "prefetch-src"?: string | boolean | string[] | undefined;
296
+ "navigate-to"?: string | boolean | string[] | undefined;
297
+ "require-sri-for"?: string | boolean | string[] | undefined;
298
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
299
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
300
+ "trusted-types"?: string | boolean | string[] | undefined;
301
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
302
+ };
303
+ }>>>;
51
304
  multidomainConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
52
305
  lockPageSlug: z.ZodString;
53
306
  contentSecurityPolicy: z.ZodOptional<z.ZodLazy<z.ZodObject<{
@@ -379,6 +632,37 @@ declare const UseAppwardenInputSchema: z.ZodObject<{
379
632
  debug: boolean;
380
633
  appwardenApiToken: string;
381
634
  lockPageSlug?: string | undefined;
635
+ contentSecurityPolicy?: {
636
+ mode: "disabled" | "report-only" | "enforced";
637
+ directives?: {
638
+ "default-src"?: string | boolean | string[] | undefined;
639
+ "script-src"?: string | boolean | string[] | undefined;
640
+ "style-src"?: string | boolean | string[] | undefined;
641
+ "img-src"?: string | boolean | string[] | undefined;
642
+ "connect-src"?: string | boolean | string[] | undefined;
643
+ "font-src"?: string | boolean | string[] | undefined;
644
+ "object-src"?: string | boolean | string[] | undefined;
645
+ "media-src"?: string | boolean | string[] | undefined;
646
+ "frame-src"?: string | boolean | string[] | undefined;
647
+ sandbox?: string | boolean | string[] | undefined;
648
+ "report-uri"?: string | boolean | string[] | undefined;
649
+ "child-src"?: string | boolean | string[] | undefined;
650
+ "form-action"?: string | boolean | string[] | undefined;
651
+ "frame-ancestors"?: string | boolean | string[] | undefined;
652
+ "plugin-types"?: string | boolean | string[] | undefined;
653
+ "base-uri"?: string | boolean | string[] | undefined;
654
+ "report-to"?: string | boolean | string[] | undefined;
655
+ "worker-src"?: string | boolean | string[] | undefined;
656
+ "manifest-src"?: string | boolean | string[] | undefined;
657
+ "prefetch-src"?: string | boolean | string[] | undefined;
658
+ "navigate-to"?: string | boolean | string[] | undefined;
659
+ "require-sri-for"?: string | boolean | string[] | undefined;
660
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
661
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
662
+ "trusted-types"?: string | boolean | string[] | undefined;
663
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
664
+ } | undefined;
665
+ } | undefined;
382
666
  multidomainConfig?: Record<string, {
383
667
  lockPageSlug: string;
384
668
  debug?: boolean | undefined;
@@ -419,6 +703,37 @@ declare const UseAppwardenInputSchema: z.ZodObject<{
419
703
  appwardenApiToken: string;
420
704
  debug?: string | boolean | undefined;
421
705
  lockPageSlug?: string | undefined;
706
+ contentSecurityPolicy?: {
707
+ mode: "disabled" | "report-only" | "enforced";
708
+ directives: string | {
709
+ "default-src"?: string | boolean | string[] | undefined;
710
+ "script-src"?: string | boolean | string[] | undefined;
711
+ "style-src"?: string | boolean | string[] | undefined;
712
+ "img-src"?: string | boolean | string[] | undefined;
713
+ "connect-src"?: string | boolean | string[] | undefined;
714
+ "font-src"?: string | boolean | string[] | undefined;
715
+ "object-src"?: string | boolean | string[] | undefined;
716
+ "media-src"?: string | boolean | string[] | undefined;
717
+ "frame-src"?: string | boolean | string[] | undefined;
718
+ sandbox?: string | boolean | string[] | undefined;
719
+ "report-uri"?: string | boolean | string[] | undefined;
720
+ "child-src"?: string | boolean | string[] | undefined;
721
+ "form-action"?: string | boolean | string[] | undefined;
722
+ "frame-ancestors"?: string | boolean | string[] | undefined;
723
+ "plugin-types"?: string | boolean | string[] | undefined;
724
+ "base-uri"?: string | boolean | string[] | undefined;
725
+ "report-to"?: string | boolean | string[] | undefined;
726
+ "worker-src"?: string | boolean | string[] | undefined;
727
+ "manifest-src"?: string | boolean | string[] | undefined;
728
+ "prefetch-src"?: string | boolean | string[] | undefined;
729
+ "navigate-to"?: string | boolean | string[] | undefined;
730
+ "require-sri-for"?: string | boolean | string[] | undefined;
731
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
732
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
733
+ "trusted-types"?: string | boolean | string[] | undefined;
734
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
735
+ };
736
+ } | undefined;
422
737
  multidomainConfig?: Record<string, {
423
738
  lockPageSlug: string;
424
739
  debug?: string | boolean | undefined;
package/index.js CHANGED
@@ -5,7 +5,7 @@ import {
5
5
  } from "./chunk-QEFORWCW.js";
6
6
  import {
7
7
  UseAppwardenInputSchema
8
- } from "./chunk-4ADGOFLV.js";
8
+ } from "./chunk-5HCAAVK5.js";
9
9
  import {
10
10
  APPWARDEN_CACHE_KEY,
11
11
  CSPDirectivesSchema,
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@appwarden/middleware",
3
- "version": "3.11.3",
3
+ "version": "3.11.4",
4
4
  "description": "Instantly disable all user interaction with your app deployed on Cloudflare or Vercel",
5
5
  "type": "module",
6
6
  "license": "MIT",
@@ -100,7 +100,6 @@
100
100
  "cookie@<0.7.0": ">=0.7.0",
101
101
  "esbuild@<=0.24.2": ">=0.25.0",
102
102
  "path-to-regexp@>=4.0.0 <6.3.0": ">=6.3.0",
103
- "tar@<7.5.7": ">=7.5.7",
104
103
  "undici@<6.23.0": ">=6.23.0",
105
104
  "body-parser@>=2.2.0 <2.2.1": ">=2.2.1",
106
105
  "jws@=4.0.0": ">=4.0.1",
@@ -111,7 +110,6 @@
111
110
  "qs@>=6.7.0 <=6.14.1": ">=6.14.2",
112
111
  "devalue@<=5.6.2": ">=5.6.3",
113
112
  "minimatch@<10.2.1": ">=10.2.3",
114
- "tar@<7.5.8": ">=7.5.8",
115
113
  "ajv@>=7.0.0-alpha.0 <8.18.0": ">=8.18.0",
116
114
  "rollup@>=4.0.0 <4.59.0": ">=4.59.0",
117
115
  "h3@<=1.15.4": ">=1.15.5",