25 lines
985 B
HTML
25 lines
985 B
HTML
<!doctype html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8" />
|
|
<!--
|
|
CSP: 'unsafe-inline' in style-src is required because:
|
|
1. Framer Motion injects <style> elements at runtime (AnimatePresence/PopChild)
|
|
2. OnboardingHero.tsx uses inline <style> for @keyframes
|
|
3. Tailwind CSS v4 Vite plugin injects <style> during dev mode (HMR)
|
|
Removing it breaks animations and dev workflow. Nonce-based CSP is not feasible
|
|
because Framer Motion's runtime style injection does not support nonces.
|
|
-->
|
|
<meta
|
|
http-equiv="Content-Security-Policy"
|
|
content="default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self';"
|
|
/>
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
|
<title>AgentCompany</title>
|
|
</head>
|
|
<body>
|
|
<div id="root"></div>
|
|
<script type="module" src="./main.tsx"></script>
|
|
</body>
|
|
</html>
|