Set an explicit, stricter CSP (#144)

2019-05-03 09:08:22 +02:00
parent 547b1fda8a
commit b7782fb806
2 changed files with 2 additions and 0 deletions
--- a/src/manifest-chromium.json
+++ b/src/manifest-chromium.json
@@ -38,6 +38,7 @@
        "http://*/*",
        "https://*/*"
    ],
+    "content_security_policy": "default-src 'none'; font-src 'self'; img-src 'self'; script-src 'self'; style-src 'self'",
    "commands": {
        "_execute_browser_action": {
            "suggested_key": {
--- a/src/manifest-firefox.json
+++ b/src/manifest-firefox.json
@@ -35,6 +35,7 @@
        "http://*/*",
        "https://*/*"
    ],
+    "content_security_policy": "default-src 'none'; font-src 'self'; img-src 'self'; script-src 'self'; style-src 'self'",
    "applications": {
        "gecko": {
            "id": "browserpass@maximbaz.com",