Baseicon: Content Security Policy (CSP) violation

[ydcjeff]

Describe the bug

Hello, Thanks for working on Content Security Policy (CSP) config (#4241) feature. It was added in PrimeVue 3.32.0. I upgraded 3.32.0 and CSP config is working as intended except at one place – Baseicon.

In the built baseicon file, the icon styles are added with styleInject helper which I think comes from package building.

https://unpkg.com/browse/primevue@3.32.0/baseicon/baseicon.esm.js

Reproducer

https://stackblitz.com/edit/vitejs-vite-sd5fap?file=dist%2Fassets%2Findex-40ac3a51.js

PrimeVue version

3.32.0

Vue version

3.x

Language

TypeScript

Build / Runtime

Vite

Browser(s)

No response

Steps to reproduce the behavior

1. npm i
2. npm run build
3. Search Baseicon in the built file, and scroll down a bit to see the styleInject function.

Expected behavior

styleInject helper function to respect PrimeVue CSP config.