single-file-core 1.3.21 → 1.3.22
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -394,7 +394,7 @@ function getProcessorHelperClass(utilInstance) {
|
|
|
394
394
|
}
|
|
395
395
|
|
|
396
396
|
setMetaCSP(metaElement) {
|
|
397
|
-
metaElement.content = "default-src 'none'; connect-src 'self'
|
|
397
|
+
metaElement.content = "default-src 'none'; connect-src 'self' data: blob:; font-src 'self' data: blob:; img-src 'self' data: blob:; style-src 'self' 'unsafe-inline' data: blob:; frame-src 'self' data: blob:; media-src 'self' data: blob:; script-src 'self' 'unsafe-inline' data: blob:; object-src 'self' data: blob:;";
|
|
398
398
|
}
|
|
399
399
|
|
|
400
400
|
removeUnusedStylesheets() {
|
package/package.json
CHANGED
|
@@ -296,7 +296,7 @@ function getHTMLStartData(pageData, options) {
|
|
|
296
296
|
pageContent += "<meta name=viewport content=" + JSON.stringify(pageData.viewport) + ">";
|
|
297
297
|
}
|
|
298
298
|
if (options.insertMetaCSP) {
|
|
299
|
-
pageContent += "<meta http-equiv=content-security-policy content=\"default-src 'none'; connect-src 'self'
|
|
299
|
+
pageContent += "<meta http-equiv=content-security-policy content=\"default-src 'none'; connect-src 'self' data: blob:; font-src 'self' data: blob:; img-src 'self' data: blob:; style-src 'self' 'unsafe-inline' data: blob:; frame-src 'self' data: blob:; media-src 'self' data: blob:; script-src 'self' 'unsafe-inline' data: blob:; object-src 'self' data: blob:\">";
|
|
300
300
|
}
|
|
301
301
|
pageContent += "<style>@keyframes display-wait-message{0%{opacity:0}100%{opacity:1}};body{color:transparent};div{color:initial}</style>";
|
|
302
302
|
pageContent += "<body hidden>";
|