Support "security" on @angular-devkit/build-angular:browser

[SophieDefendi]

Command

build, config

Description

In angular.json the builder @angular-devkit/build-angular:browser does not seem to currently support "autoCsp": true when passed as follows:

{
  "$schema": "./node_modules/@angular/cli/lib/config/schema.json",
  "version": 1,
  "newProjectRoot": "projects",
  "projects": {
    <project>: {
      ...
      "architect": {
        "build": {
          "builder": "@angular-devkit/build-angular:browser",
          "options": {
            ...
            "security": {
              "autoCsp": true
            }
          }
        }
      }
    }
  }
}

It impacts the builder @angular-devkit/build-angular:browser, which means is not possible to both have autoCSP and to extend webpack.

Describe the solution you'd like

No response

Describe alternatives you've considered

No response

[alan-agius4]

This is expected.

New features are only added to the esbuild based application builder.

[clydin]

If possible, could you provide further details on the use cases and/or requirements of your project for extending the Webpack configuration with the browser builder?

[SophieDefendi]

We're using the @angular-builders/custom-webpack:browser builder (which is extended on @angular-devkit/build-angular:browser) to allow for SVG sprites for our build. We are also setting some ENV variables.

Extending the Webpack configuration with security at the browser builder will hopefully allow us to configure autoCsp. Thanks for the heads up, we will initiate a migration from webpack to Esbuild for our project!

[angular-automatic-lock-bot]

This issue has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.

Read more about our automatic conversation locking policy.

_{This action has been performed automatically by a bot.}