React frontend: Setting content-security-policy in the index.html doesn't seem to do anything?

[peterparker]

It’s a side effect of breaking changes of dfx v0.13.1. Now when you create a new project it gets created with a restrictive CSP. You can disable it, I understand did not try my self, in .ic-assets.json. Not sure if you have to clean and redeploy afterwards, checkout the release notes.

Dfx 0.13.1 is promoted with breaking changes

Yes, you can overwrite any of these. In the first place, you’ll only see these values in .ic-assets.json in new projects, meaning you ran dfx new with dfx 0.13.1. In the second, you are free to edit the values or overwrite the header values for specific files or directories.