moparisthebest/mail
1
0
Fork 0
mirror of https://github.com/moparisthebest/mail synced 2024-12-22 23:38:48 -05:00
Code Issues Releases Wiki Activity

add csp in index.html meta tag and remove sandboxed csp directives from chrome mainfest

Browse Source
This commit is contained in:
Tankred Hase 2013-09-15 11:27:51 +02:00
parent 74f52ef52c
commit 08bf80d5ae
2 changed files with 1 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
src/index.html
View File

@ -3,6 +3,7 @@
<head> <head>
<meta charset="utf-8"> <meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta http-equiv="Content-Security-Policy" content="default-src 'self'; connect-src *; style-src 'self' data: chrome-extension-resource: 'unsafe-inline'; img-src 'self' data: chrome-extension-resource:; frame-src 'self' data: chrome-extension-resource:; font-src 'self' data: chrome-extension-resource:; media-src *;">
<title>Mail</title> <title>Mail</title>
<link href="css/reset.css" rel="stylesheet"> <link href="css/reset.css" rel="stylesheet">

4
src/manifest.json
View File

@ -28,9 +28,5 @@
"background": { "background": {
"scripts": ["background.js"] "scripts": ["background.js"]
} }
},
"sandbox": {
"pages": ["sandbox.html", "mail-content.html"],
"content_security_policy": "sandbox allow-scripts; default-src 'self'; object-src 'none'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src *; frame-src *"
} }
} }