Use much stricter, whitelist based CSP (#3162)

This commit is contained in:
Vending Machine 2025-06-06 18:30:19 +02:00 committed by GitHub
parent 0ce7772500
commit e7076f5aee
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
11 changed files with 221 additions and 74 deletions

View file

@ -53,14 +53,12 @@ function makeSearchItem(src: string) {
<Flex style={{ alignItems: "center", gap: "0.5em" }}>
<img
style={{
borderRadius: i >= 3 // Do not round Google, Yandex & SauceNAO
? "50%"
: void 0
borderRadius: "50%",
}}
aria-hidden="true"
height={16}
width={16}
src={new URL("/favicon.ico", Engines[engine]).toString().replace("lens.", "")}
src={`https://icons.duckduckgo.com/ip3/${new URL(Engines[engine]).host}.ico`}
/>
{engine}
</Flex>