feat: add csp with astro-shield

Author: brckd

astro.config.ts

@@ -1,23 +1,35 @@
 import { defineConfig } from "astro/config";
 import mdx from "@astrojs/mdx";
-import markdown from "./src/lib/markdownConfig";
-import { SITE_URI } from "./src/consts";
+import shield from "@kindspells/astro-shield";
 
 import { loadEnv } from "vite";
 import vercel from "@astrojs/vercel";
 import netlify from "@astrojs/netlify";
+const adapters = {
+  netlify: netlify(),
+  vercel: vercel(),
+};
+
+import markdown from "./src/lib/markdownConfig";
+import { SITE_URI } from "./src/consts";
 
 const env = loadEnv(process.env.NODE_ENV!, process.cwd(), "");
-const adapter = env.ADAPTER?.toLowerCase();
+const _adapter = env.ADAPTER?.toLowerCase();
+const adapter =
+  _adapter === "netlify" || _adapter === "vercel" ? _adapter : undefined;
 
 export default defineConfig({
   site: SITE_URI,
   markdown,
-  integrations: [mdx()],
-  adapter:
-    adapter === "netlify"
-      ? netlify()
-      : adapter === "vercel"
-        ? vercel()
-        : undefined,
+  integrations: [
+    mdx(),
+    shield({
+      securityHeaders: {
+        enableOnStaticPages: adapter && {
+          provider: adapter,
+        },
+      },
+    }),
+  ],
+  adapter: adapter && adapters[adapter],
 });

bun.lockb

@@ -39,6 +39,7 @@
     "@astrojs/vercel": "^8.0.7",
     "@fontsource-variable/jetbrains-mono": "^5.1.2",
     "@fontsource-variable/lexend": "^5.1.2",
+    "@kindspells/astro-shield": "^1.7.1",
     "@mdx-js/mdx": "^3.1.0",
     "astro": "^5.3.0",
     "autoprefixer": "^10.4.20",