Merge pull request #2 from seongwon-kang/master

add Content-Security-Policy
yokawasa · Feb 19, 2020 · 85a5aeb · 85a5aeb
2 parents 92e433d + 5e6d708
commit 85a5aeb
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/extension.ts b/src/extension.ts
@@ -60,6 +60,7 @@ function getWebviewContent(token: string, header: any, payload: any) {
 <head>
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <meta http-equiv="Content-Security-Policy" content="default-src http://localhost:* http://127.0.0.1:*; script-src 'unsafe-inline'; style-src 'unsafe-inline';"></head>
   <title>JWT Debugger - Decoded</title>
 </head>
 <body>