allow self-embed (previews, etc.)
All checks were successful
Lint / pnpm_install (push) Successful in 1m18s
Publish Docker image / Build (push) Successful in 4m40s
Test (production install and build) / production (20.16.0) (push) Successful in 1m11s
Test (backend) / unit (20.16.0) (push) Successful in 7m4s
Test (backend) / e2e (20.16.0) (push) Successful in 10m12s
Lint / lint (backend) (push) Successful in 2m29s
Lint / lint (frontend) (push) Successful in 2m23s
Lint / lint (frontend-embed) (push) Successful in 2m28s
Lint / lint (frontend-shared) (push) Successful in 2m32s
Lint / lint (misskey-bubble-game) (push) Successful in 2m30s
Lint / lint (misskey-js) (push) Successful in 2m29s
Lint / lint (misskey-reversi) (push) Successful in 2m34s
Lint / lint (sw) (push) Successful in 2m31s
Lint / typecheck (backend) (push) Successful in 2m16s
Lint / typecheck (misskey-js) (push) Successful in 1m56s
Lint / typecheck (sw) (push) Successful in 1m57s

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>
This commit is contained in:
ゆめ 2024-11-11 21:54:57 -06:00
parent 2419a9f740
commit e53f9bc172
No known key found for this signature in database

View file

@ -44,7 +44,6 @@ export function generateCSP(hashedMap: Map<string, CSPHashed>, options: {
['style-src-attr', ['\'self\'', '\'unsafe-inline\'']], ['style-src-attr', ['\'self\'', '\'unsafe-inline\'']],
['script-src', ['\'self\'', '\'wasm-unsafe-eval\'', ...scripts]], ['script-src', ['\'self\'', '\'wasm-unsafe-eval\'', ...scripts]],
['object-src', ['\'none\'']], ['object-src', ['\'none\'']],
['frame-src', ['\'none\'']],
['base-uri', ['\'self\'']], ['base-uri', ['\'self\'']],
['form-action', ['\'self\'']], ['form-action', ['\'self\'']],
['child-src', ['\'self\'']], ['child-src', ['\'self\'']],