Make EquicordHelper Bypass CSP CSP

This commit is contained in:
thororen1234 2025-05-23 09:13:16 -04:00
parent 1a2e90e9cc
commit 6820f02666
No known key found for this signature in database
5 changed files with 12 additions and 3 deletions

View file

@ -146,7 +146,7 @@ export const globPlugins = kind => ({
});
build.onLoad({ filter, namespace: "import-plugins" }, async () => {
const pluginDirs = ["plugins/_api", "plugins/_core", "plugins", "userplugins", "equicordplugins", "equicordplugins/_core"];
const pluginDirs = ["plugins/_api", "plugins/_core", "plugins", "userplugins", "equicordplugins"];
let code = "";
let pluginsCode = "\n";
let metaCode = "\n";

View file

@ -264,7 +264,7 @@ function isPluginFile({ name }: { name: string; }) {
const plugins = [] as PluginData[];
await Promise.all(["src/plugins", "src/plugins/_core", "src/equicordplugins", "src/equicordplugins/_core"].flatMap(dir =>
await Promise.all(["src/plugins", "src/plugins/_core", "src/equicordplugins"].flatMap(dir =>
readdirSync(dir, { withFileTypes: true })
.filter(isPluginFile)
.map(async dirent => {

View file

@ -0,0 +1,9 @@
/*
* Vencord, a Discord client mod
* Copyright (c) 2025 Vendicated and contributors
* SPDX-License-Identifier: GPL-3.0-or-later
*/
import { CspPolicies, MediaScriptsAndCssSrc } from "@main/csp";
CspPolicies["*"] = MediaScriptsAndCssSrc;

View file

@ -12,7 +12,7 @@ const ConnectSrc = ["connect-src"];
const MediaSrc = [...ConnectSrc, "img-src", "media-src"];
const CssSrc = ["style-src", "font-src"];
const MediaAndCssSrc = [...MediaSrc, ...CssSrc];
const MediaScriptsAndCssSrc = [...MediaAndCssSrc, "script-src", "worker-src"];
export const MediaScriptsAndCssSrc = [...MediaAndCssSrc, "script-src", "worker-src"];
// Plugins can whitelist their own domains by importing this object in their native.ts
// script and just adding to it. But generally, you should just edit this file instead