Content Security Policy breaks react webview in codespace on Safari

[rafaelha]

When opening a codespace in GitHub in Safari, the following error output is produced when first opening the Flamegraph panel:

and the panel is stuck on "Loading profile data..."

When the panel is already open and another profile is loaded (or the command Flamegraph: Show is run), the flame graph finally appears:

However, as can be seen, the legend icons are not loaded, and the following error message is produced:

This is specific to Safari. Edge and Chrome work well. The Content Security Policy needs to be updated.

[rafaelha]

I'm not sure what changed, but the legend icons now load properly on Safari 18.5