We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent b5de410 commit 5e1322eCopy full SHA for 5e1322e
src/webview/cluster/clusterViewLoader.ts
@@ -235,8 +235,8 @@ export default class ClusterViewLoader {
235
const reactAppUri = p.webview.asWebviewUri(reactAppPathOnDisk);
236
const htmlString:Buffer = fs.readFileSync(path.join(reactAppRootOnDisk, 'index.html'));
237
const meta = `<meta http-equiv="Content-Security-Policy"
238
- content="connect-src *;
239
- object-src https://console-openshift-console.apps-crc.testing/;
+ content="connect-src *;
+ default-src 'none';
240
img-src ${p.webview.cspSource} https: 'self' data:;
241
script-src 'unsafe-eval' 'unsafe-inline' vscode-resource:;
242
style-src 'self' vscode-resource: 'unsafe-inline';">`;
0 commit comments