added html import, image embedding, and font checks
This commit is contained in:
@@ -27,25 +27,23 @@
|
||||
"fs:allow-exe-write",
|
||||
"store:default",
|
||||
"window-state:default",
|
||||
"http:default",
|
||||
"http:allow-fetch",
|
||||
"shell:default",
|
||||
"shell:allow-open",
|
||||
"opener:default",
|
||||
{
|
||||
"identifier": "http:allow-fetch",
|
||||
"identifier": "http:default",
|
||||
"allow": [
|
||||
{
|
||||
"url": "https://fonts.google.com/*"
|
||||
"url": "https://*"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/*"
|
||||
"url": "http://*"
|
||||
},
|
||||
{
|
||||
"url": "https://*.githubusercontent.com/*"
|
||||
"url": "https://*:*"
|
||||
},
|
||||
{
|
||||
"url": "https://fonts.googleapis.com/*"
|
||||
"url": "http://*:*"
|
||||
}
|
||||
]
|
||||
},
|
||||
|
||||
@@ -28,7 +28,7 @@
|
||||
}
|
||||
],
|
||||
"security": {
|
||||
"csp": "default-src 'self'; connect-src 'self' ipc: http://ipc.localhost https://fonts.googleapis.com https://fonts.gstatic.com https://github.com https://raw.githubusercontent.com https://fonts.google.com; font-src 'self' https://fonts.gstatic.com data:; style-src 'self' 'unsafe-inline' data: blob: https://fonts.googleapis.com; img-src 'self' data: blob:; script-src 'self' 'unsafe-inline'; frame-src 'self' blob: about:;",
|
||||
"csp": "default-src 'self'; connect-src 'self' ipc: http://ipc.localhost https: http:; font-src 'self' https://fonts.gstatic.com data:; style-src 'self' 'unsafe-inline' data: blob: https://fonts.googleapis.com; img-src 'self' data: blob: https: http:; script-src 'self' 'unsafe-inline'; frame-src 'self' blob: about:;",
|
||||
"dangerousDisableAssetCspModification": true
|
||||
}
|
||||
},
|
||||
|
||||
Reference in New Issue
Block a user