add csp in index.html meta tag and remove sandboxed csp directives from chrome mainfest

This commit is contained in:
Tankred Hase 2013-09-15 11:27:51 +02:00
parent 74f52ef52c
commit 08bf80d5ae
2 changed files with 1 additions and 4 deletions

View File

@ -3,6 +3,7 @@
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta http-equiv="Content-Security-Policy" content="default-src 'self'; connect-src *; style-src 'self' data: chrome-extension-resource: 'unsafe-inline'; img-src 'self' data: chrome-extension-resource:; frame-src 'self' data: chrome-extension-resource:; font-src 'self' data: chrome-extension-resource:; media-src *;">
<title>Mail</title>
<link href="css/reset.css" rel="stylesheet">

View File

@ -28,9 +28,5 @@
"background": {
"scripts": ["background.js"]
}
},
"sandbox": {
"pages": ["sandbox.html", "mail-content.html"],
"content_security_policy": "sandbox allow-scripts; default-src 'self'; object-src 'none'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src *; frame-src *"
}
}