wxt 0.18.2 → 0.18.3

package/dist/{chunk-7EUSM4KG.js → chunk-XAYX5BXI.js}

@@ -12,7 +12,7 @@ import {
 } from "./chunk-VBXJIVYU.js";
 
 // package.json
-var version = "0.18.1";
+var version = "0.18.2";
 
 // src/core/utils/paths.ts
 import systemPath from "node:path";
@@ -700,7 +700,7 @@ function safeVarName(str) {
 }
 function removeImportStatements(text) {
   return text.replace(
-    /(import\s?[{\w][\s\S]*?from\s?["'][\s\S]*?["'];?|import\s?["'][\s\S]*?["'];?)/gm,
+    /(import\s?[\s\S]*?from\s?["'][\s\S]*?["'];?|import\s?["'][\s\S]*?["'];?)/gm,
     ""
   );
 }
@@ -2477,20 +2477,28 @@ function addDevModeCsp(manifest) {
   } else {
     addPermission(manifest, permission);
   }
-  const csp = new ContentSecurityPolicy(
+  const extensionPagesCsp = new ContentSecurityPolicy(
     manifest.manifest_version === 3 ? (
       // @ts-expect-error: extension_pages is not typed
       manifest.content_security_policy?.extension_pages ?? "script-src 'self' 'wasm-unsafe-eval'; object-src 'self';"
     ) : manifest.content_security_policy ?? "script-src 'self'; object-src 'self';"
     // default CSP for MV2
   );
-  if (wxt.server)
-    csp.add("script-src", allowedCsp);
+  const sandboxCsp = new ContentSecurityPolicy(
+    // @ts-expect-error: sandbox is not typed
+    manifest.content_security_policy?.sandbox ?? "sandbox allow-scripts allow-forms allow-popups allow-modals; script-src 'self' 'unsafe-inline' 'unsafe-eval'; child-src 'self';"
+    // default sandbox CSP for MV3
+  );
+  if (wxt.server) {
+    extensionPagesCsp.add("script-src", allowedCsp);
+    sandboxCsp.add("script-src", allowedCsp);
+  }
   if (manifest.manifest_version === 3) {
     manifest.content_security_policy ??= {};
-    manifest.content_security_policy.extension_pages = csp.toString();
+    manifest.content_security_policy.extension_pages = extensionPagesCsp.toString();
+    manifest.content_security_policy.sandbox = sandboxCsp.toString();
   } else {
-    manifest.content_security_policy = csp.toString();
+    manifest.content_security_policy = extensionPagesCsp.toString();
   }
 }
 function addDevModePermissions(manifest) {

package/dist/cli.js

@@ -930,7 +930,7 @@ function safeVarName(str) {
 }
 function removeImportStatements(text) {
   return text.replace(
-    /(import\s?[{\w][\s\S]*?from\s?["'][\s\S]*?["'];?|import\s?["'][\s\S]*?["'];?)/gm,
+    /(import\s?[\s\S]*?from\s?["'][\s\S]*?["'];?|import\s?["'][\s\S]*?["'];?)/gm,
     ""
   );
 }
@@ -2515,7 +2515,7 @@ function getChunkSortWeight(filename) {
 import pc4 from "picocolors";
 
 // package.json
-var version = "0.18.1";
+var version = "0.18.2";
 
 // src/core/utils/log/printHeader.ts
 function printHeader() {
@@ -2985,20 +2985,28 @@ function addDevModeCsp(manifest) {
   } else {
     addPermission(manifest, permission);
   }
-  const csp = new ContentSecurityPolicy(
+  const extensionPagesCsp = new ContentSecurityPolicy(
     manifest.manifest_version === 3 ? (
       // @ts-expect-error: extension_pages is not typed
       manifest.content_security_policy?.extension_pages ?? "script-src 'self' 'wasm-unsafe-eval'; object-src 'self';"
     ) : manifest.content_security_policy ?? "script-src 'self'; object-src 'self';"
     // default CSP for MV2
   );
-  if (wxt.server)
-    csp.add("script-src", allowedCsp);
+  const sandboxCsp = new ContentSecurityPolicy(
+    // @ts-expect-error: sandbox is not typed
+    manifest.content_security_policy?.sandbox ?? "sandbox allow-scripts allow-forms allow-popups allow-modals; script-src 'self' 'unsafe-inline' 'unsafe-eval'; child-src 'self';"
+    // default sandbox CSP for MV3
+  );
+  if (wxt.server) {
+    extensionPagesCsp.add("script-src", allowedCsp);
+    sandboxCsp.add("script-src", allowedCsp);
+  }
   if (manifest.manifest_version === 3) {
     manifest.content_security_policy ??= {};
-    manifest.content_security_policy.extension_pages = csp.toString();
+    manifest.content_security_policy.extension_pages = extensionPagesCsp.toString();
+    manifest.content_security_policy.sandbox = sandboxCsp.toString();
   } else {
-    manifest.content_security_policy = csp.toString();
+    manifest.content_security_policy = extensionPagesCsp.toString();
   }
 }
 function addDevModePermissions(manifest) {

package/dist/index.cjs

@@ -5208,7 +5208,7 @@ function safeVarName(str) {
 }
 function removeImportStatements(text2) {
   return text2.replace(
-    /(import\s?[{\w][\s\S]*?from\s?["'][\s\S]*?["'];?|import\s?["'][\s\S]*?["'];?)/gm,
+    /(import\s?[\s\S]*?from\s?["'][\s\S]*?["'];?|import\s?["'][\s\S]*?["'];?)/gm,
     ""
   );
 }
@@ -6805,7 +6805,7 @@ function getChunkSortWeight(filename) {
 var import_picocolors4 = __toESM(require("picocolors"), 1);
 
 // package.json
-var version = "0.18.1";
+var version = "0.18.2";
 
 // src/core/utils/building/internal-build.ts
 var import_fast_glob3 = __toESM(require("fast-glob"), 1);
@@ -7269,20 +7269,28 @@ function addDevModeCsp(manifest) {
   } else {
     addPermission(manifest, permission);
   }
-  const csp = new ContentSecurityPolicy(
+  const extensionPagesCsp = new ContentSecurityPolicy(
     manifest.manifest_version === 3 ? (
       // @ts-expect-error: extension_pages is not typed
       manifest.content_security_policy?.extension_pages ?? "script-src 'self' 'wasm-unsafe-eval'; object-src 'self';"
     ) : manifest.content_security_policy ?? "script-src 'self'; object-src 'self';"
     // default CSP for MV2
   );
-  if (wxt.server)
-    csp.add("script-src", allowedCsp);
+  const sandboxCsp = new ContentSecurityPolicy(
+    // @ts-expect-error: sandbox is not typed
+    manifest.content_security_policy?.sandbox ?? "sandbox allow-scripts allow-forms allow-popups allow-modals; script-src 'self' 'unsafe-inline' 'unsafe-eval'; child-src 'self';"
+    // default sandbox CSP for MV3
+  );
+  if (wxt.server) {
+    extensionPagesCsp.add("script-src", allowedCsp);
+    sandboxCsp.add("script-src", allowedCsp);
+  }
   if (manifest.manifest_version === 3) {
     manifest.content_security_policy ??= {};
-    manifest.content_security_policy.extension_pages = csp.toString();
+    manifest.content_security_policy.extension_pages = extensionPagesCsp.toString();
+    manifest.content_security_policy.sandbox = sandboxCsp.toString();
   } else {
-    manifest.content_security_policy = csp.toString();
+    manifest.content_security_policy = extensionPagesCsp.toString();
   }
 }
 function addDevModePermissions(manifest) {

package/dist/index.d.cts

@@ -65,6 +65,6 @@ declare function prepare(config: InlineConfig): Promise<void>;
  */
 declare function zip(config?: InlineConfig): Promise<string[]>;
 
-var version = "0.18.1";
+var version = "0.18.2";
 
 export { BuildOutput, ExtensionRunnerConfig, InlineConfig, UserConfig, WxtDevServer, build, clean, createServer, defineConfig, defineRunnerConfig, initialize, prepare, version, zip };

package/dist/index.d.ts

@@ -65,6 +65,6 @@ declare function prepare(config: InlineConfig): Promise<void>;
  */
 declare function zip(config?: InlineConfig): Promise<string[]>;
 
-var version = "0.18.1";
+var version = "0.18.2";
 
 export { BuildOutput, ExtensionRunnerConfig, InlineConfig, UserConfig, WxtDevServer, build, clean, createServer, defineConfig, defineRunnerConfig, initialize, prepare, version, zip };

package/dist/index.js

@@ -19,7 +19,7 @@ import {
   unnormalizePath,
   version,
   wxt
-} from "./chunk-7EUSM4KG.js";
+} from "./chunk-XAYX5BXI.js";
 import "./chunk-5X3S6AWF.js";
 import {
   consola

package/dist/testing.js

@@ -5,7 +5,7 @@ import {
   tsconfigPaths,
   unimport,
   webextensionPolyfillMock
-} from "./chunk-7EUSM4KG.js";
+} from "./chunk-XAYX5BXI.js";
 import "./chunk-5X3S6AWF.js";
 import "./chunk-ZZCTFNQ5.js";
 import "./chunk-VBXJIVYU.js";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "wxt",
   "type": "module",
-  "version": "0.18.2",
+  "version": "0.18.3",
   "description": "Next gen framework for developing web extensions",
   "repository": {
     "type": "git",