Scarfski/dootask
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

取消 Content-Security-Policy

Browse Source
This commit is contained in:
kuaifan
2023-02-27 01:33:07 +08:00
parent e500426f8f
commit 9a9d19e16c
3 changed files with 15 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docker/drawio/webapp/index.html
View File

@@ -225,7 +225,7 @@
if (mxIsElectron)
{
mxmeta(null, 'default-src \'self\' \'unsafe-inline\'; connect-src \'self\' https://*.draw.io https://fonts.googleapis.com https://fonts.gstatic.com; img-src * data:; media-src *; font-src *; style-src-elem \'self\' \'unsafe-inline\' https://fonts.googleapis.com', 'Content-Security-Policy');
// mxmeta(null, 'default-src \'self\' \'unsafe-inline\'; connect-src \'self\' https://*.draw.io https://fonts.googleapis.com https://fonts.gstatic.com; img-src * data:; media-src *; font-src *; style-src-elem \'self\' \'unsafe-inline\' https://fonts.googleapis.com', 'Content-Security-Policy');
}
})();

26
docker/drawio/webapp/js/diagramly/ElectronApp.js vendored
View File

@@ -183,19 +183,19 @@ mxStencilRegistry.allowEval = false;
}
//Remove old relaxed CSP and add strict one
var allMeta = document.getElementsByTagName('meta');
for (var i = 0; i < allMeta.length; i++)
{
if (allMeta[i].getAttribute('http-equiv') == 'Content-Security-Policy')
{
allMeta[i].parentNode.removeChild(allMeta[i]);
}
break;
}
mxmeta(null, 'default-src \'self\'; connect-src \'self\' https://fonts.googleapis.com https://fonts.gstatic.com; img-src * data:; media-src *; font-src *; style-src \'self\' \'unsafe-inline\' https://fonts.googleapis.com', 'Content-Security-Policy');
// var allMeta = document.getElementsByTagName('meta');
//
// for (var i = 0; i < allMeta.length; i++)
// {
// if (allMeta[i].getAttribute('http-equiv') == 'Content-Security-Policy')
// {
// allMeta[i].parentNode.removeChild(allMeta[i]);
// }
//
// break;
// }
//
// mxmeta(null, 'default-src \'self\'; connect-src \'self\' https://fonts.googleapis.com https://fonts.gstatic.com; img-src * data:; media-src *; font-src *; style-src \'self\' \'unsafe-inline\' https://fonts.googleapis.com', 'Content-Security-Policy');
//Disable web plugins loading
urlParams['plugins'] = '0';

2
resources/mobile

Submodule resources/mobile updated: 519581b211...c359714220