fix: csp including img.shields.io and cdn-uploads.huggingface.co in img-src directive (#5967)

* fix: csp including img.shields.io in img-src directive

* fix: add huggingface upload cdn to img-src directive
This commit is contained in:
Nguyen Ngoc Minh 2025-07-29 02:30:00 -07:00 committed by GitHub
parent 210ace79d5
commit eb714776ba
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -45,7 +45,7 @@
"font-src": [
"https://fonts.gstatic.com blob: data: tauri://localhost http://tauri.localhost"
],
"img-src": "'self' asset: http://asset.localhost blob: data: https://cdn.jsdelivr.net",
"img-src": "'self' asset: http://asset.localhost blob: data: https://cdn.jsdelivr.net https://img.shields.io https://cdn-uploads.huggingface.co",
"style-src": "'unsafe-inline' 'self' https://fonts.googleapis.com",
"script-src": "'self' asset: $APPDATA/**.* http://asset.localhost https://eu-assets.i.posthog.com https://posthog.com"
},