From bd0d6a9ac00568ba5616f2b5cd3e512553609259 Mon Sep 17 00:00:00 2001 From: ToBinio Date: Fri, 2 May 2025 18:53:52 +0200 Subject: [PATCH] chore(theseus): add https://*.githubusercontent.com to frame-src (#1298) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * chore: add https://*.githubusercontent.com to frame-src * chore(app): move `githubusercontent.com` CSP allowance to the proper media category --------- Co-authored-by: Alejandro González Co-authored-by: Prospector <6166773+Prospector@users.noreply.github.com> --- apps/app/tauri.conf.json | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/apps/app/tauri.conf.json b/apps/app/tauri.conf.json index d74f49300..a9a6dc3ba 100644 --- a/apps/app/tauri.conf.json +++ b/apps/app/tauri.conf.json @@ -87,7 +87,8 @@ "img-src": "https: 'unsafe-inline' 'self' asset: http://asset.localhost blob: data:", "style-src": "'unsafe-inline' 'self'", "script-src": "https://*.posthog.com 'self'", - "frame-src": "https://www.youtube.com https://www.youtube-nocookie.com https://discord.com 'self'" + "frame-src": "https://www.youtube.com https://www.youtube-nocookie.com https://discord.com 'self'", + "media-src": "https://*.githubusercontent.com" } } }