synced/coder
1
0
Fork 0
mirror of https://github.com/coder/coder.git synced 2025-07-15 22:20:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: Fix CSP style directive for Monaco editor (#5360)

Browse Source
This commit is contained in:
Bruno Quaresma
2022-12-08 16:53:50 -03:00
committed by GitHub
parent 3c9dab34bf
commit 92c5e97f85
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
site/site.go
View File

@ -269,9 +269,9 @@ func cspHeaders(next http.Handler) http.Handler {
// https://cdn.jsdelivr.net is used by monaco editor on FE for Syntax Highlight
// https://github.com/suren-atoyan/monaco-react/issues/168
CSPDirectiveScriptSrc: {"'self' https://cdn.jsdelivr.net"},
CSPDirectiveStyleSrc: {"'self' 'unsafe-inline' https://cdn.jsdelivr.net"},
// data: is used by monaco editor on FE for Syntax Highlight
CSPDirectiveFontSrc: {"'self' data:"},
CSPDirectiveStyleSrc: {"'self' 'unsafe-inline'"},
CSPDirectiveFontSrc: {"'self' data:"},
// object-src is needed to support code-server
CSPDirectiveObjectSrc: {"'self'"},
// blob: for loading the pwa manifest for code-server