Adding content-security-policy to webview content by jalissia · Pull Request #95 · microsoft/vscode-edge-devtools

jalissia · 2019-08-23T20:48:47Z

This PR fixes #91 by adding a content-security-policy meta tag to the webview html and the devtools.html iframe.

Split out the inline css into a separate file so that we don't need to use styles-src 'unsafe-inline'
Update build steps to copy new css file to out directory
Add new content-security-policy to lock down the webview content to just files we provide
Added missing body tag to webview content

mjbvz

Thanks for the quick turn around!

jalissia added 3 commits August 21, 2019 11:25

Adding content security policy

d3c121d

Adding inline and devtools.html

43fffd7

Remove inline style from iframe

a7213b4

jalissia added the bug Something isn't working label Aug 23, 2019

jalissia requested review from bgoddar, fabiorocha, mjbvz, mwjacksonmsft, robpaveza, vidorteg and xirzec August 23, 2019 20:48

mjbvz approved these changes Aug 24, 2019

View reviewed changes

vidorteg approved these changes Aug 26, 2019

View reviewed changes

Merge branch 'master' into user/jalissia/content-security-policy

fa87e12

jalissia merged commit 73e37ef into master Sep 3, 2019

jalissia deleted the user/jalissia/content-security-policy branch September 3, 2019 19:14

Provide feedback