From 13af6f5f3b0ad5ede755ad33d0dc0b63bf6542c8 Mon Sep 17 00:00:00 2001
From: ghiscoding <Ghislain.Beaulac@se.com>
Date: Thu, 30 Nov 2023 16:57:03 -0500
Subject: [PATCH] chore: cleanup CSP Example

---
 examples/example-csp-header.html | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/examples/example-csp-header.html b/examples/example-csp-header.html
index 7116d65c7..6aea8b5f5 100644
--- a/examples/example-csp-header.html
+++ b/examples/example-csp-header.html
@@ -28,12 +28,17 @@ <h2>
       <ul>
         <li>CSP header, currently using
           <code>
-            default-src 'self';
-            script-src 'self' https://cdn.jsdelivr.net 'nonce-browser-sync';
-            style-src 'self' 'nonce-random-string'; require-trusted-types-for 'script';
-            trusted-types dompurify;
+            <pre>
+              default-src 'self';
+              script-src 'self' https://cdn.jsdelivr.net 'nonce-browser-sync';
+              style-src 'self' 'nonce-random-string'; require-trusted-types-for 'script';
+              trusted-types dompurify;
+            </pre>
           </code>
         </li>
+        <li>
+          <strong>Do not use <code>https://cdn.jsdelivr.net</code> as CSP since that is too broad and risky. We only do it for demo purposes</strong>
+        </li>
       </ul>
         <h2>View Source:</h2>
         <ul>