chore: update csp (#2826)

2024-02-02 10:59:58 -06:00
parent 19a515ee6e
commit 1c6b31f643
6 changed files with 7 additions and 65 deletions
--- a/packages/web/web.webpack.dev.js
+++ b/packages/web/web.webpack.dev.js
@@ -19,6 +19,8 @@ module.exports = (env, argv) => {
    devServer: {
      headers: {
        'Access-Control-Allow-Origin': '*',
+        'Content-Security-Policy':
+          "default-src https: 'self'; base-uri 'self'; child-src * blob:; connect-src * data: blob:; font-src * data:; form-action 'self'; frame-ancestors * file:; frame-src * blob:; img-src 'self' * data: blob:; manifest-src 'self'; media-src 'self' blob: *.standardnotes.com; object-src 'self' blob: *.standardnotes.com; script-src 'self' 'sha256-r26E+iPOhx7KM7cKn4trOSoD8u5E7wL7wwJ8UrR+rGs=' 'wasm-unsafe-eval'; style-src *;",
      },
      hot: true,
      static: './dist',