diff --git a/src/equicordplugins/equicordHelper/native.ts b/src/equicordplugins/equicordHelper/native.ts index d4640708..9b72dc27 100644 --- a/src/equicordplugins/equicordHelper/native.ts +++ b/src/equicordplugins/equicordHelper/native.ts @@ -4,6 +4,6 @@ * SPDX-License-Identifier: GPL-3.0-or-later */ -import { CspPolicies, ImageScriptsAndCssSrc } from "@main/csp"; +import { CspPolicies, Src } from "@main/csp"; -CspPolicies["*"] = ImageScriptsAndCssSrc; +CspPolicies["*"] = Src; diff --git a/src/main/csp/index.ts b/src/main/csp/index.ts index 0f7ab34b..21949e0a 100644 --- a/src/main/csp/index.ts +++ b/src/main/csp/index.ts @@ -13,7 +13,8 @@ export const ConnectSrc = ["connect-src"]; export const ImageSrc = [...ConnectSrc, "img-src"]; export const CssSrc = ["style-src", "font-src"]; export const ImageAndCssSrc = [...ImageSrc, ...CssSrc]; -export const ImageScriptsAndCssSrc = [...ImageAndCssSrc, "script-src", "worker-src", "frame-src"]; +export const ImageScriptsAndCssSrc = [...ImageAndCssSrc, "script-src", "worker-src"]; +export const Src = ["style-src", "connect-src", "img-src", "frame-src", "font-src", "media-src", "worker-src"]; // Plugins can whitelist their own domains by importing this object in their native.ts // script and just adding to it. But generally, you should just edit this file instead