Context isolation for the debug log window

2021-10-06 12:16:51 -04:00
parent 0f9608d9a3
commit fa66ddde0f
28 changed files with 477 additions and 686 deletions
--- a/loading.html
+++ b/loading.html
@@ -4,6 +4,18 @@
 <!DOCTYPE html>
 <html>
  <head>
+    <meta
+      http-equiv="Content-Security-Policy"
+      content="default-src 'none';
+            frame-src 'none';
+            form-action 'none';
+            font-src 'self';
+            img-src 'self' blob: data:;
+            media-src 'self' blob:;
+            object-src 'none';
+            script-src 'self';
+            style-src 'self' 'unsafe-inline';"
+    />
    <link
      href="node_modules/sanitize.css/sanitize.css"
      rel="stylesheet"