fix: csp img-src allowed urls

This commit is contained in:
fbwoolf
2023-07-24 19:27:15 -05:00
committed by Fara Woolf
parent 75d87606fe
commit 361b79e7aa
3 changed files with 3 additions and 4 deletions

View File

@@ -31,8 +31,7 @@ const environmentIcons = {
const contentSecurityPolicyEnvironment = {
development:
"script-src 'self' 'wasm-unsafe-eval'; object-src 'self'; frame-src 'none'; frame-ancestors 'none';",
production:
"default-src 'none'; connect-src *; style-src 'unsafe-inline'; img-src 'self' data: https:; script-src 'self' 'wasm-unsafe-eval'; object-src 'none'; frame-src 'none'; frame-ancestors 'none';",
production: `default-src 'none'; connect-src *; style-src 'unsafe-inline'; img-src 'self' data: https:; script-src 'self' 'wasm-unsafe-eval'; object-src 'none'; frame-src 'none'; frame-ancestors 'none';`,
};
const defaultIconEnvironment = {

View File

@@ -9,7 +9,7 @@ export function Favicon({ origin }: FaviconProps) {
if (hasError) return null;
return (
<img
src={`http://www.google.com/s2/favicons?domain=${origin}`}
src={`https://www.google.com/s2/favicons?domain=${origin}`}
onError={() => setHasError(true)}
/>
);

View File

@@ -25,7 +25,7 @@ interface BitcoinTransactionStatus {
block_time?: number | null;
}
interface BitcoinTransactionVectorOutput {
export interface BitcoinTransactionVectorOutput {
scriptpubkey: string;
scriptpubkey_asm: string;
scriptpubkey_type: string;