synced/coder
1
0
Fork 0
mirror of https://github.com/coder/coder.git synced 2025-07-09 11:45:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: Fix CSP for monaco editor (#5358)

Browse Source
This commit is contained in:
Bruno Quaresma
2022-12-08 15:32:41 -03:00
committed by GitHub
parent ce76d9d5a3
commit 3c9dab34bf
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
site/site.go
View File

@ -266,9 +266,12 @@ func cspHeaders(next http.Handler) http.Handler {
CSPDirectiveDefaultSrc: {"'self'"}, CSPDirectiveDefaultSrc: {"'self'"},
CSPDirectiveConnectSrc: {"'self'"}, CSPDirectiveConnectSrc: {"'self'"},
CSPDirectiveChildSrc: {"'self'"}, CSPDirectiveChildSrc: {"'self'"},
CSPDirectiveScriptSrc: {"'self'"}, // https://cdn.jsdelivr.net is used by monaco editor on FE for Syntax Highlight
CSPDirectiveFontSrc: {"'self'"}, // https://github.com/suren-atoyan/monaco-react/issues/168
CSPDirectiveStyleSrc: {"'self' 'unsafe-inline'"}, CSPDirectiveScriptSrc: {"'self' https://cdn.jsdelivr.net"},
// data: is used by monaco editor on FE for Syntax Highlight
CSPDirectiveFontSrc: {"'self' data:"},
CSPDirectiveStyleSrc: {"'self' 'unsafe-inline'"},
// object-src is needed to support code-server // object-src is needed to support code-server
CSPDirectiveObjectSrc: {"'self'"}, CSPDirectiveObjectSrc: {"'self'"},
// blob: for loading the pwa manifest for code-server // blob: for loading the pwa manifest for code-server