From 5cb40dd2f5e1528fb1edfd9524b7ee657052c32d Mon Sep 17 00:00:00 2001 From: thororen1234 <78185467+thororen1234@users.noreply.github.com> Date: Thu, 19 Jun 2025 22:08:31 -0400 Subject: [PATCH] Moyai: Fix CSP --- src/equicordplugins/equicordHelper/native.ts | 4 ++-- src/main/csp/index.ts | 3 ++- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/src/equicordplugins/equicordHelper/native.ts b/src/equicordplugins/equicordHelper/native.ts index d4640708..9b72dc27 100644 --- a/src/equicordplugins/equicordHelper/native.ts +++ b/src/equicordplugins/equicordHelper/native.ts @@ -4,6 +4,6 @@ * SPDX-License-Identifier: GPL-3.0-or-later */ -import { CspPolicies, ImageScriptsAndCssSrc } from "@main/csp"; +import { CspPolicies, Src } from "@main/csp"; -CspPolicies["*"] = ImageScriptsAndCssSrc; +CspPolicies["*"] = Src; diff --git a/src/main/csp/index.ts b/src/main/csp/index.ts index 0f7ab34b..21949e0a 100644 --- a/src/main/csp/index.ts +++ b/src/main/csp/index.ts @@ -13,7 +13,8 @@ export const ConnectSrc = ["connect-src"]; export const ImageSrc = [...ConnectSrc, "img-src"]; export const CssSrc = ["style-src", "font-src"]; export const ImageAndCssSrc = [...ImageSrc, ...CssSrc]; -export const ImageScriptsAndCssSrc = [...ImageAndCssSrc, "script-src", "worker-src", "frame-src"]; +export const ImageScriptsAndCssSrc = [...ImageAndCssSrc, "script-src", "worker-src"]; +export const Src = ["style-src", "connect-src", "img-src", "frame-src", "font-src", "media-src", "worker-src"]; // Plugins can whitelist their own domains by importing this object in their native.ts // script and just adding to it. But generally, you should just edit this file instead