Content-Security-Policy

Author: lanly-dev

src/index.pug

@@ -3,9 +3,11 @@ html
     title Spec
     meta(charset='UTF-8')
     meta(http-equiv='Content-Security-Policy',
-      content=`default-src 'none'; img-src vscode-resource: https:; script-src 'nonce-${nonce}';\
-      style-src 'nonce-${nonce}' https:; font-src data: vscode-resource: https:; worker-src blob:;\
-      connect-src vscode-resource: ws:`)
+      content=`default-src 'none';\
+      script-src 'nonce-${nonce}';\
+      style-src 'nonce-${nonce}' https:;\
+      font-src vscode-resource: data: https:;\
+      connect-src vscode-resource: 'nonce-${nonce}';`)
     meta(name='viewport', content='width=device-width, initial-scale=1.0')
     script(nonce=`${nonce}`).
       rootPath = '#{song_path}'