Fix #1010 (#1020)

* Fix #1010 * explicit csp for respective directives * update csp in other webviews
shanalikhan · Sep 2, 2019 · 8c9a534 · 8c9a534
1 parent 8902a74
commit 8c9a534
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 1 deletion.
diff --git a/ui/gist-selection/gist-selection.html b/ui/gist-selection/gist-selection.html
@@ -6,6 +6,10 @@
       name="viewport"
       content="width=device-width, initial-scale=1, shrink-to-fit=no"
     />
+    <meta
+      http-equiv="Content-Security-Policy"
+      content="default-src vscode-resource:; script-src 'unsafe-inline' vscode-resource:; style-src 'unsafe-inline' vscode-resource:;"
+    />
     <link
       rel="stylesheet"
       href="@PWD/ui/shared/vendor/bootstrap/css/bootstrap.min.css"

diff --git a/ui/landing-page/landing-page.html b/ui/landing-page/landing-page.html
@@ -6,6 +6,10 @@
       name="viewport"
       content="width=device-width, initial-scale=1, shrink-to-fit=no"
     />
+    <meta
+      http-equiv="Content-Security-Policy"
+      content="default-src vscode-resource:; script-src 'unsafe-inline' vscode-resource:; style-src 'unsafe-inline' vscode-resource:; img-src data: vscode-resource:;"
+    />
     <link
       rel="stylesheet"
       href="@PWD/ui/shared/vendor/bootstrap/css/bootstrap.min.css"

diff --git a/ui/settings/settings.html b/ui/settings/settings.html
@@ -6,7 +6,10 @@
       name="viewport"
       content="width=device-width, initial-scale=1, shrink-to-fit=no"
     />
-
+    <meta
+      http-equiv="Content-Security-Policy"
+      content="default-src vscode-resource:; script-src 'unsafe-inline' vscode-resource:; style-src 'unsafe-inline' vscode-resource:; img-src data: vscode-resource:;"
+    />
     <link
       rel="stylesheet"
       href="@PWD/ui/shared/vendor/bootstrap/css/bootstrap.min.css"