From 1fd45bb5ae39e6323b7ed8119e70ccc4495f8834 Mon Sep 17 00:00:00 2001 From: Krzysztof Jelski Date: Thu, 16 Jul 2020 16:17:05 +0200 Subject: [PATCH] Add 'self' CSP for css. (#3212) --- packages/apps-electron/src/electron/contentSecurityPolicy.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/apps-electron/src/electron/contentSecurityPolicy.ts b/packages/apps-electron/src/electron/contentSecurityPolicy.ts index 7336842074..0eb86047d9 100644 --- a/packages/apps-electron/src/electron/contentSecurityPolicy.ts +++ b/packages/apps-electron/src/electron/contentSecurityPolicy.ts @@ -10,7 +10,7 @@ export const setupContentSecurityPolicy = (environment: string): void => { responseHeaders: { ...details.responseHeaders, 'Content-Security-Policy': [`default-src 'self' ${environment === 'development' ? "'unsafe-eval'" : ''};` + - " style-src-elem https://fonts.googleapis.com/css 'unsafe-inline';" + + " style-src-elem 'self' https://fonts.googleapis.com/css 'unsafe-inline';" + " font-src data: 'self' https://fonts.gstatic.com;" + " style-src 'unsafe-inline';" + " connect-src 'self' wss:;" +