New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Remove unnecessary gapi entries from the manifest CSP #7071

Closed

twschiller opened this issue Dec 7, 2023 · 0 comments · Fixed by #7072

Contributor

twschiller commented Dec 7, 2023

Context

We had some content_security_policy entries to accommodate gapi
We've removed gapi

pixiebrix-extension/src/manifest.json

Line 21 in ac277e1

    
           "content_security_policy": "script-src 'self' https://apis.google.com 'unsafe-eval'; font-src 'self' https://fonts.gstatic.com; connect-src 'self' http: https:; object-src 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; frame-src 'self' https: https://*.googleapis.com https://docs.google.com",

Related

Remove 'unsafe-eval' from CSP #4387: tangentially related, because it's also about CSP

twschiller mentioned this issue

#7071: drop gapi requirements from CSP #7072

Merged

3 tasks

twschiller closed this as completed in #7072

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment