neptune/ghost-portal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add 'self' CSP for css. (#3212)

Browse Source
This commit is contained in:
Krzysztof Jelski 2020-07-16 16:17:05 +02:00 committed by GitHub
parent 2493e1d2b9
commit 1fd45bb5ae
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
packages/apps-electron/src/electron/contentSecurityPolicy.ts
View File

@ -10,7 +10,7 @@ export const setupContentSecurityPolicy = (environment: string): void => {
responseHeaders: {
...details.responseHeaders,
'Content-Security-Policy': [`default-src 'self' ${environment === 'development' ? "'unsafe-eval'" : ''};` +
" style-src-elem https://fonts.googleapis.com/css 'unsafe-inline';" +
" style-src-elem 'self' https://fonts.googleapis.com/css 'unsafe-inline';" +
" font-src data: 'self' https://fonts.gstatic.com;" +
" style-src 'unsafe-inline';" +
" connect-src 'self' wss:;" +