@seamapi/react 0.13.0 → 0.14.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +21 -0
  2. package/package.json +1 -1
package/README.md CHANGED
@@ -66,6 +66,27 @@ Load the font from Google Fonts by placing the following in the `<head>` tag:
66
66
 
67
67
  [Source Sans Pro]: https://fonts.google.com/specimen/Source+Sans+Pro
68
68
 
69
+ ### Content Security Policy (CSP)
70
+
71
+ By self hosting the recommended fonts (or choosing not to use them),
72
+ and proxying the Seam endpoint, the components are compatible with the strictest CSP:
73
+
74
+ ```
75
+ default-src 'self'
76
+ ```
77
+
78
+ When using the default endpoint:
79
+
80
+ ```
81
+ default-src 'self'; connect-src https://connect.getseam.com
82
+ ```
83
+
84
+ When serving the fonts from Google Fonts:
85
+
86
+ ```
87
+ default-src 'self'; font-src 'self' https://fonts.gstatic.com; style-src 'self' https://fonts.googleapis.com
88
+ ```
89
+
69
90
  ## Development and Testing
70
91
 
71
92
  ### Quickstart
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@seamapi/react",
3
- "version": "0.13.0",
3
+ "version": "0.14.0",
4
4
  "description": "Seam React component library.",
5
5
  "type": "module",
6
6
  "main": "index.js",