chore: fix csp warning

fcasal · fcasal · commit d6649d4e7c8d · 2025-12-22T17:18:18.000Z
diff --git a/src/codeMarker.ts b/src/codeMarker.ts
@@ -3938,15 +3938,14 @@ class DragAndDropController implements vscode.TreeDragAndDropController<TreeEntr
             return;
         }
 
-        const data = dataTransfer.get(this.LOCATION_MIME_TYPE);
+        let data = dataTransfer.get(this.LOCATION_MIME_TYPE);
         if (data === undefined) {
             return;
         }
 
-        const value = data.value as TreeEntry;
-        if (isLocationEntry(value)) {
+        if (isLocationEntry(data.value as TreeEntry)) {
             // A LocationEntry is being dragged
-            const locationEntry = value;
+            const locationEntry = data.value as FullLocationEntry;
 
             if (target === undefined) {
                 // dragged a location entry into the empty space
diff --git a/src/panels/findingDetailsPanel.ts b/src/panels/findingDetailsPanel.ts
@@ -106,7 +106,7 @@ class FindingDetailsProvider implements vscode.WebviewViewProvider {
             <head>
               <meta charset="UTF-8">
               <meta name="viewport" content="width=device-width, initial-scale=1.0">
-              <meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src ${webview.cspSource} 'unsafe-inline'; font-src ${webview.cspSource}; script-src 'nonce-${nonce}';">
+              <meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src ${webview.cspSource} 'unsafe-inline'; font-src ${webview.cspSource}; script-src 'nonce-${nonce}'; connect-src ${webview.cspSource};">
               <link rel="stylesheet" href="${styleUri.toString()}">
               <title>Finding Details</title>
             </head>
diff --git a/src/panels/gitConfigPanel.ts b/src/panels/gitConfigPanel.ts
@@ -114,7 +114,7 @@ class GitConfigProvider implements vscode.WebviewViewProvider {
             <head>
               <meta charset="UTF-8">
               <meta name="viewport" content="width=device-width, initial-scale=1.0">
-              <meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src ${webview.cspSource} 'unsafe-inline'; font-src ${webview.cspSource}; script-src 'nonce-${nonce}';">
+              <meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src ${webview.cspSource} 'unsafe-inline'; font-src ${webview.cspSource}; script-src 'nonce-${nonce}'; connect-src ${webview.cspSource};">
               <link rel="stylesheet" href="${styleUri.toString()}">
               <title>Component Gallery</title>
             </head>
