Fix CSP by removing globalThis polyfill

[robbie-c]

Fixes #76

Tells webpack not to inject this polyfill, which looks like this (unminified):

/******/ 	/* webpack/runtime/global */
/******/ 	(() => {
/******/ 		__webpack_require__.g = (function() {
/******/ 			if (typeof globalThis === 'object') return globalThis;
/******/ 			try {
/******/ 				return this || new Function('return this')();
/******/ 			} catch (e) {
/******/ 				if (typeof window === 'object') return window;
/******/ 			}
/******/ 		})();
/******/ 	})();

the new Function('return this') part is the bit that will break your CSP rules, see https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/script-src#unsafe_eval_expressions

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
react-json-view	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	May 16, 2025 1:56pm

[Kikobeats]

wow this a really good catch, thanks for it!