mirrors/signal-desktop
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages 2 Wiki Activity Actions

Tighten up CSP

Browse source 
Should be all we need, modulo staging/prod.
This commit is contained in:
lilia 2014-10-28 13:34:15 -07:00
parent 24768712e0
commit c4ae7a21d8
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
manifest.json
View file

@ -25,6 +25,7 @@
"options_page": "options.html",
// XXX: FOR TESTING ONLY, REMOVE BEFORE RELEASE:
"content_security_policy": "script-src 'self' 'unsafe-eval'; object-src 'self'"
"content_security_policy":
"default-src 'self'; img-src 'self' data:; connect-src https://textsecure-service-staging.whispersystems.org wss://textsecure-service-staging.whispersystems.org https://whispersystems-textsecure-attachments-staging.s3.amazonaws.com"
}