Astro 5.9 introduces experimental Content Security Policy support using hash-based approach that works across static sites, serverless, and SPAs. The release adds renderMarkdown helper for content loaders, allows disabling default styles in responsive images for better Tailwind 4 compatibility, and enables adapters to suppress feature support logs. The CSP implementation generates meta elements with hashes for all scripts and styles, providing XSS protection without requiring server-side nonce generation.
Table of contents
Experimental Content Security Policy supportRendering Markdown in content loadersDisable default styles in experimental responsive imagesAllow adapters to suppress logs about feature supportCommunity3 Comments
Sort: