diff --git a/docker/drawio/webapp/index.html b/docker/drawio/webapp/index.html index 9de7d7bf1..faf5906df 100644 --- a/docker/drawio/webapp/index.html +++ b/docker/drawio/webapp/index.html @@ -225,7 +225,7 @@ if (mxIsElectron) { - mxmeta(null, 'default-src \'self\' \'unsafe-inline\'; connect-src \'self\' https://*.draw.io https://fonts.googleapis.com https://fonts.gstatic.com; img-src * data:; media-src *; font-src *; style-src-elem \'self\' \'unsafe-inline\' https://fonts.googleapis.com', 'Content-Security-Policy'); + // mxmeta(null, 'default-src \'self\' \'unsafe-inline\'; connect-src \'self\' https://*.draw.io https://fonts.googleapis.com https://fonts.gstatic.com; img-src * data:; media-src *; font-src *; style-src-elem \'self\' \'unsafe-inline\' https://fonts.googleapis.com', 'Content-Security-Policy'); } })(); diff --git a/docker/drawio/webapp/js/diagramly/ElectronApp.js b/docker/drawio/webapp/js/diagramly/ElectronApp.js index 4481cfc0a..f74f32cf0 100644 --- a/docker/drawio/webapp/js/diagramly/ElectronApp.js +++ b/docker/drawio/webapp/js/diagramly/ElectronApp.js @@ -183,19 +183,19 @@ mxStencilRegistry.allowEval = false; } //Remove old relaxed CSP and add strict one - var allMeta = document.getElementsByTagName('meta'); - - for (var i = 0; i < allMeta.length; i++) - { - if (allMeta[i].getAttribute('http-equiv') == 'Content-Security-Policy') - { - allMeta[i].parentNode.removeChild(allMeta[i]); - } - - break; - } - - mxmeta(null, 'default-src \'self\'; connect-src \'self\' https://fonts.googleapis.com https://fonts.gstatic.com; img-src * data:; media-src *; font-src *; style-src \'self\' \'unsafe-inline\' https://fonts.googleapis.com', 'Content-Security-Policy'); + // var allMeta = document.getElementsByTagName('meta'); + // + // for (var i = 0; i < allMeta.length; i++) + // { + // if (allMeta[i].getAttribute('http-equiv') == 'Content-Security-Policy') + // { + // allMeta[i].parentNode.removeChild(allMeta[i]); + // } + // + // break; + // } + // + // mxmeta(null, 'default-src \'self\'; connect-src \'self\' https://fonts.googleapis.com https://fonts.gstatic.com; img-src * data:; media-src *; font-src *; style-src \'self\' \'unsafe-inline\' https://fonts.googleapis.com', 'Content-Security-Policy'); //Disable web plugins loading urlParams['plugins'] = '0'; diff --git a/resources/mobile b/resources/mobile index 519581b21..c35971422 160000 --- a/resources/mobile +++ b/resources/mobile @@ -1 +1 @@ -Subproject commit 519581b2116cb3ba69860a80496e63339ff43416 +Subproject commit c359714220dd630c0b93ca2c1ee65c30eeb8dbbc