Add configuration for Vite hot reloading

README.md

@@ -92,6 +92,11 @@ return [
      */
     'enabled' => env('CSP_ENABLED', true),
 
+    /**
+     * Headers will be added when Vite is hot reloading.
+     */
+    'enabled_while_hot_reloading' => env('CSP_ENABLED_WHILE_HOT_RELOADING', false),
+
     /*
      * The class responsible for generating the nonces used in inline tags and headers.
      */

config/csp.php

@@ -43,6 +43,11 @@
      */
     'enabled' => env('CSP_ENABLED', true),
 
+    /**
+     * Headers will be added when Vite is hot reloading.
+     */
+    'enabled_while_hot_reloading' => env('CSP_ENABLED_WHILE_HOT_RELOADING', false),
+
     /*
      * The class responsible for generating the nonces used in inline tags and headers.
      */

src/AddCspHeaders.php

@@ -20,8 +20,13 @@ public function handle(
             return $response;
         }
 
-        // Skip CSP middleware when Laravel is rendering an exception or Vite is hot reloading
-        if (config('app.debug') && ($response->isServerError() || Vite::isRunningHot())) {
+        // Skip CSP middleware when Laravel is rendering an exception
+        if (config('app.debug') && $response->isServerError()) {
+            return $response;
+        }
+
+        // Skip CSP middleware when Vite is hot reloading
+        if (config('app.debug') && ! config('csp.enabled_while_hot_reloading') && Vite::isRunningHot()) {
             return $response;
         }
 

tests/AddCspHeadersTest.php

@@ -335,6 +335,7 @@ public function configure(Policy $policy): void
 
 test('route middleware is skipped when vite is hot reloading', function (): void {
     config(['app.debug' => true]);
+    config(['csp.enabled_while_hot_reloading' => false]);
 
     $this->mock(Vite::class, function (MockInterface $mock): void {
         $mock->shouldReceive('isRunningHot')->andReturn(true);