From 3a2a16a09c68b116e66e4af3e8b8de232c9658af Mon Sep 17 00:00:00 2001 From: Vendicated Date: Sat, 7 Jun 2025 01:18:14 +0200 Subject: [PATCH] whitelist tenor and pinterest for use in themes --- src/main/csp.ts | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/main/csp.ts b/src/main/csp.ts index b35a11a8..3e592ccb 100644 --- a/src/main/csp.ts +++ b/src/main/csp.ts @@ -19,6 +19,7 @@ export const MediaScriptsAndCssSrc = [...MediaAndCssSrc, "script-src", "worker-s export const CspPolicies: PolicyMap = { "*.github.io": MediaAndCssSrc, // GitHub pages, used by most themes + "github.com": MediaAndCssSrc, // GitHub content (stuff uploaded to markdown forms), used by most themes "raw.githubusercontent.com": MediaAndCssSrc, // GitHub raw, used by some themes "*.gitlab.io": MediaAndCssSrc, // GitLab pages, used by some themes "gitlab.com": MediaAndCssSrc, // GitLab raw, used by some themes @@ -32,6 +33,8 @@ export const CspPolicies: PolicyMap = { "i.imgur.com": MediaSrc, // Imgur, used by some themes "i.ibb.co": MediaSrc, // ImgBB, used by some themes + "i.pinimg.com": MediaSrc, // Pinterest, used by some themes + "*.tenor.com": MediaSrc, // Tenor, used by some themes "cdn.discordapp.com": MediaAndCssSrc, // Discord CDN, used by Vencord and some themes to load media "media.discordapp.net": MediaSrc, // Discord media CDN, possible alternative to Discord CDN