CalvinBackup/anonymous_github
1
0
Fork 0
mirror of https://github.com/tdurieux/anonymous_github.git synced 2026-09-12 21:58:57 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: restore scripts and video playback on project pages

Browse Source
This commit is contained in:
tdurieux
2026-09-08 18:01:32 +02:00
parent f6cbdd97bc
commit 74bd6bb779
2 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/server/routes/webview.ts
+3 -1
View File
@@ -65,7 +65,9 @@ async function webView(
req: express.Request<{ repoId: string; path?: string[] }>,
res: express.Response
) {
res.header("Content-Security-Policy", "sandbox allow-popups allow-forms allow-modals");
// Project pages need scripts and autoplay, but must stay isolated from the app.
// Keep allow-same-origin absent so repository documents retain an opaque origin.
res.header("Content-Security-Policy", "sandbox allow-scripts allow-popups allow-forms allow-modals");
const repo = await getRepo(req, res);
if (!repo) return;
try {