···

       
77
       
77
       
 
       
});

     

       
78
       
78
       
 
       


     

       
79
       
79
       
 
       
function patchCsp(headers: Record<string, string[]>) {

     

       
80
       
80
       
-
       
  const directives = [

     

       
81
       
81
       
-
       
    "script-src",

     

       
82
       
82
       
-
       
    "style-src",

     

       
83
       
83
       
-
       
    "connect-src",

     

       
84
       
84
       
-
       
    "img-src",

     

       
85
       
85
       
-
       
    "font-src",

     

       
86
       
86
       
-
       
    "media-src",

     

       
87
       
87
       
-
       
    "worker-src",

     

       
88
       
88
       
-
       
    "prefetch-src"

     

       
89
       
89
       
-
       
  ];

     

       
80
       
80
       
+
       
  const directives = ["script-src", "style-src", "connect-src", "img-src", "font-src", "media-src", "worker-src"];

     

       
90
       
81
       
 
       
  const values = ["*", "blob:", "data:", "'unsafe-inline'", "'unsafe-eval'", "disclip:"];

     

       
91
       
82
       
 
       


     

       
92
       
83
       
 
       
  const csp = "content-security-policy";