avi/Nostr_Keynctr
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Enforce header-based CSP and block window open/navigation

Browse source
This commit is contained in:
Avi 2026-08-21 13:53:45 -05:00
commit 4d4dfde1de
2 changed files with 70 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

4
frontend/index.html
View file

@ -3,10 +3,6 @@
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<meta
http-equiv="Content-Security-Policy"
content="default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' ws: http://localhost:*; img-src 'self' data: https:; object-src 'none'; base-uri 'none'; form-action 'none'"
/>
<title>Nostr Feed Manager</title>
</head>
<body>