feat: add option to remove CSP in webview

Author: subframe7536

README.md

@@ -248,6 +248,7 @@ According to [#34](https://github.com/subframe7536/vscode-custom-ui-style/issues
 | `custom-ui-style.external.imports`          | External CSS or JS resources, support variable: [${userHome}, ${env:your_env_name:optional_fallback_value}], support protocol: 'https://', 'file://'                                                         | `array`   | ``          |
 | `custom-ui-style.stylesheet`                | Custom css for editor, support nest selectors                                                                                                                                                                | `object`  | `{}`        |
 | `custom-ui-style.webview.enable`            | Enable style patch in webview                                                                                                                                                                                | `boolean` | `true`      |
+| `custom-ui-style.webview.removeCSP`         | Remove Content-Security-Policy restrict in webview                                                                                                                                                           | `boolean` | `true`      |
 | `custom-ui-style.webview.monospaceSelector` | Custom monospace selector in webview                                                                                                                                                                         | `array`   | ``          |
 | `custom-ui-style.webview.sansSerifSelector` | Custom sans-serif selector in webview                                                                                                                                                                        | `array`   | ``          |
 | `custom-ui-style.webview.stylesheet`        | Custom css for webview, support nest selectors                                                                                                                                                               | `object`  | `{}`        |

package.json

@@ -176,6 +176,12 @@
           "default": true,
           "description": "Enable style patch in webview"
         },
+        "custom-ui-style.webview.removeCSP": {
+          "scope": "application",
+          "type": "boolean",
+          "default": true,
+          "description": "Remove Content-Security-Policy restrict in webview"
+        },
         "custom-ui-style.webview.monospaceSelector": {
           "scope": "application",
           "type": "array",

src/manager/webview.ts

@@ -27,7 +27,10 @@ function getCSS() {
   return result
 }
 
-export function fixSha256(html: string) {
+export function fixCSP(html: string, remove: boolean) {
+  if (remove) {
+    return html.replace('meta http-equiv="Content-Security-Policy"', 'meta http-equiv=""')
+  }
   const [, scriptString] = html.match(/<script async=?"{0,2} type="module">([\s\S]*?)<\/script>/) || []
   if (!scriptString) {
     return html
@@ -46,11 +49,12 @@ export class WebViewFileManager extends BaseFileManager {
     if (!config['webview.enable']) {
       return content
     }
-    return fixSha256(
+    return fixCSP(
       content.replace(
         entry,
         `${getCSS()}\n\n\t\t\t${entry}`,
       ),
+      config['webview.removeCSP'],
     )
   }
 }