chore: allow all HTTPS image sources in img-src directive (#5970)

This commit is contained in:
Nguyen Ngoc Minh 2025-07-29 06:04:35 -07:00 committed by GitHub
parent f61ce886a0
commit ee582a8e52
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -45,7 +45,7 @@
"font-src": [
"https://fonts.gstatic.com blob: data: tauri://localhost http://tauri.localhost"
],
"img-src": "'self' asset: http://asset.localhost blob: data: https://cdn.jsdelivr.net https://img.shields.io https://cdn-uploads.huggingface.co",
"img-src": "'self' asset: http://asset.localhost blob: data: https:",
"style-src": "'unsafe-inline' 'self' https://fonts.googleapis.com",
"script-src": "'self' asset: $APPDATA/**.* http://asset.localhost https://eu-assets.i.posthog.com https://posthog.com"
},