fix: Move the ide-toolkits urls to default-src in the csp

awslabs · Mar 4, 2024 · 2275272 · 2275272
1 parent 6829d72
commit 2275272
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/threat-composer-app/public/index.html b/packages/threat-composer-app/public/index.html
@@ -4,7 +4,7 @@
 <head>
   <meta charset="utf-8" />
   <meta http-equiv='Content-Security-Policy'
-    content="default-src 'self' ; img-src 'self' * data:; font-src 'self' data:; script-src 'self' https://ide-toolkits.threat-composer.aws.dev http://local.ide-toolkits.threat-composer.aws.dev:3000; style-src 'self' 'unsafe-inline'; media-src 'none' ; frame-src 'none';" />
+    content="default-src 'self' https://ide-toolkits.threat-composer.aws.dev http://local.ide-toolkits.threat-composer.aws.dev:3000; img-src 'self' * data:; font-src 'self' data:; script-src 'self'; style-src 'self' 'unsafe-inline'; media-src 'none' ; frame-src 'none';" />
   <meta name="viewport" content="width=device-width, initial-scale=1" />
   <meta name="theme-color" content="#000000" />
   <meta name="description" content="threat-composer" />