taler-typescript-core

Wallet core logic and WebUIs for various components
Log | Files | Refs | Submodules | README | LICENSE
commit 096a8dfa5abed87f570c534f04cc7e515363312b
parent bc6665fe0580a6588ee9a2d37961ea88270f435c
Author: Sebastian <sebasjm@gmail.com>
Date:   Mon, 26 May 2025 17:22:11 -0300

fix #10028

Diffstat:

Mpackages/taler-wallet-webextension/static/popup.html | 2+-


Mpackages/taler-wallet-webextension/static/wallet.html | 2+-


2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/taler-wallet-webextension/static/popup.html b/packages/taler-wallet-webextension/static/popup.html
@@ -3,7 +3,7 @@
   <head>
     <meta http-equiv="content-type" content="text/html; charset=utf-8" />
     <meta charset="utf-8" />
-    <meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self'; connect-src *; img-src 'self' data:; style-src 'self';font-src 'self';base-uri 'self';form-action 'self'">
+    <meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self'; connect-src *; img-src 'self' data:; style-src-elem 'unsafe-inline' 'self'; style-src 'unsafe-inline' 'self';font-src 'self';base-uri 'self';form-action 'self'">
     <style>
       html {
         font-family: sans-serif; /* 1 */
diff --git a/packages/taler-wallet-webextension/static/wallet.html b/packages/taler-wallet-webextension/static/wallet.html
@@ -6,7 +6,7 @@
   <meta charset="utf-8" />
   <meta http-equiv="content-type" content="text/html; charset=utf-8" />
   <meta name="taler-support" content="uri,api" /> 
-  <meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self'; connect-src *; img-src 'self' data:; style-src 'self';font-src 'self';base-uri 'self'; form-action 'self'; frame-src data:">
+    <meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self'; connect-src *; img-src 'self' data:; style-src-elem 'unsafe-inline' 'self'; style-src 'unsafe-inline' 'self';font-src 'self';base-uri 'self';form-action 'self'">
   <link rel="stylesheet" type="text/css" href="/dist/walletEntryPoint.css" />
   <link rel="stylesheet" type="text/css" href="/static/font/import.css" />
   <link rel="icon"