added html import, image embedding, and font checks

This commit is contained in:
2026-03-21 15:38:29 +02:00
parent 2a029588aa
commit 7e6b52586d
12 changed files with 492 additions and 42 deletions

View File

@@ -27,25 +27,23 @@
"fs:allow-exe-write",
"store:default",
"window-state:default",
"http:default",
"http:allow-fetch",
"shell:default",
"shell:allow-open",
"opener:default",
{
"identifier": "http:allow-fetch",
"identifier": "http:default",
"allow": [
{
"url": "https://fonts.google.com/*"
"url": "https://*"
},
{
"url": "https://github.com/*"
"url": "http://*"
},
{
"url": "https://*.githubusercontent.com/*"
"url": "https://*:*"
},
{
"url": "https://fonts.googleapis.com/*"
"url": "http://*:*"
}
]
},

View File

@@ -28,7 +28,7 @@
}
],
"security": {
"csp": "default-src 'self'; connect-src 'self' ipc: http://ipc.localhost https://fonts.googleapis.com https://fonts.gstatic.com https://github.com https://raw.githubusercontent.com https://fonts.google.com; font-src 'self' https://fonts.gstatic.com data:; style-src 'self' 'unsafe-inline' data: blob: https://fonts.googleapis.com; img-src 'self' data: blob:; script-src 'self' 'unsafe-inline'; frame-src 'self' blob: about:;",
"csp": "default-src 'self'; connect-src 'self' ipc: http://ipc.localhost https: http:; font-src 'self' https://fonts.gstatic.com data:; style-src 'self' 'unsafe-inline' data: blob: https://fonts.googleapis.com; img-src 'self' data: blob: https: http:; script-src 'self' 'unsafe-inline'; frame-src 'self' blob: about:;",
"dangerousDisableAssetCspModification": true
}
},