Added CspHtmlWebpackPlugin

Author: enicolasgomez

webapp/webpack.config.js

@@ -2,6 +2,7 @@ const path = require('path');
 const webpack = require('webpack');
 const HtmlWebpackPlugin = require('html-webpack-plugin');
 const CopyWebpackPlugin = require('copy-webpack-plugin');
+const CspHtmlWebpackPlugin = require('csp-html-webpack-plugin');
 const MiniCssExtractPlugin = require('mini-css-extract-plugin');
 /*
  *var BundleAnalyzerPlugin = require('webpack-bundle-analyzer').BundleAnalyzerPlugin;
@@ -147,6 +148,16 @@ module.exports = function (env) {
          */
         chunks: [],
       }),
+      new CspHtmlWebpackPlugin({
+        'default-src': "'self'",
+        'script-src': ["'self'", "'unsafe-inline'"],
+        'style-src': ["'self'", "'unsafe-inline'"],
+        'img-src': ["'self'", 'data:', 'blob:'],
+        'frame-ancestors': ['*'] 
+      }, {
+        enabled: true,
+        hashingMethod: 'sha256',
+      }),
       new webpack.DefinePlugin({ 'process.env': { NODE_ENV: JSON.stringify(isProduction ? 'production' : 'development') } }),
       new MiniCssExtractPlugin({ filename: '[name].css' }),
     ],