Add CSP fallback to sandbox.html for non-chrome app runtimes

This commit is contained in:
Tankred Hase 2014-07-09 22:00:18 +02:00
parent 021510d936
commit 4e897d01ff
1 changed files with 5 additions and 3 deletions

View File

@ -2,9 +2,11 @@
<html style="overflow: auto">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<script src="sandbox.js"></script>
<!-- CSP for sandbox is set in chrome manifest. This is a fallback in non chrome app runtimes. -->
<meta http-equiv="Content-Security-Policy" content="default-src 'self'; object-src 'none'; style-src 'self' 'unsafe-inline'; img-src *">
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<script src="sandbox.js"></script>
</head>
<body></body>