From 9a9d19e16c0e11c604d467d103d600bb4e126359 Mon Sep 17 00:00:00 2001 From: kuaifan Date: Mon, 27 Feb 2023 01:33:07 +0800 Subject: [PATCH] =?UTF-8?q?=E5=8F=96=E6=B6=88=20Content-Security-Policy?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- docker/drawio/webapp/index.html | 2 +- .../drawio/webapp/js/diagramly/ElectronApp.js | 26 +++++++++---------- resources/mobile | 2 +- 3 files changed, 15 insertions(+), 15 deletions(-) diff --git a/docker/drawio/webapp/index.html b/docker/drawio/webapp/index.html index 9de7d7bf1..faf5906df 100644 --- a/docker/drawio/webapp/index.html +++ b/docker/drawio/webapp/index.html @@ -225,7 +225,7 @@ if (mxIsElectron) { - mxmeta(null, 'default-src \'self\' \'unsafe-inline\'; connect-src \'self\' https://*.draw.io https://fonts.googleapis.com https://fonts.gstatic.com; img-src * data:; media-src *; font-src *; style-src-elem \'self\' \'unsafe-inline\' https://fonts.googleapis.com', 'Content-Security-Policy'); + // mxmeta(null, 'default-src \'self\' \'unsafe-inline\'; connect-src \'self\' https://*.draw.io https://fonts.googleapis.com https://fonts.gstatic.com; img-src * data:; media-src *; font-src *; style-src-elem \'self\' \'unsafe-inline\' https://fonts.googleapis.com', 'Content-Security-Policy'); } })(); diff --git a/docker/drawio/webapp/js/diagramly/ElectronApp.js b/docker/drawio/webapp/js/diagramly/ElectronApp.js index 4481cfc0a..f74f32cf0 100644 --- a/docker/drawio/webapp/js/diagramly/ElectronApp.js +++ b/docker/drawio/webapp/js/diagramly/ElectronApp.js @@ -183,19 +183,19 @@ mxStencilRegistry.allowEval = false; } //Remove old relaxed CSP and add strict one - var allMeta = document.getElementsByTagName('meta'); - - for (var i = 0; i < allMeta.length; i++) - { - if (allMeta[i].getAttribute('http-equiv') == 'Content-Security-Policy') - { - allMeta[i].parentNode.removeChild(allMeta[i]); - } - - break; - } - - mxmeta(null, 'default-src \'self\'; connect-src \'self\' https://fonts.googleapis.com https://fonts.gstatic.com; img-src * data:; media-src *; font-src *; style-src \'self\' \'unsafe-inline\' https://fonts.googleapis.com', 'Content-Security-Policy'); + // var allMeta = document.getElementsByTagName('meta'); + // + // for (var i = 0; i < allMeta.length; i++) + // { + // if (allMeta[i].getAttribute('http-equiv') == 'Content-Security-Policy') + // { + // allMeta[i].parentNode.removeChild(allMeta[i]); + // } + // + // break; + // } + // + // mxmeta(null, 'default-src \'self\'; connect-src \'self\' https://fonts.googleapis.com https://fonts.gstatic.com; img-src * data:; media-src *; font-src *; style-src \'self\' \'unsafe-inline\' https://fonts.googleapis.com', 'Content-Security-Policy'); //Disable web plugins loading urlParams['plugins'] = '0'; diff --git a/resources/mobile b/resources/mobile index 519581b21..c35971422 160000 --- a/resources/mobile +++ b/resources/mobile @@ -1 +1 @@ -Subproject commit 519581b2116cb3ba69860a80496e63339ff43416 +Subproject commit c359714220dd630c0b93ca2c1ee65c30eeb8dbbc