🔧 CSP 추가: CDN 리소스(폰트, highlight.js) 로딩 허용

2026-04-11 22:18:25 +09:00
parent 82109bcc06
commit 25ebdde1fe
1 changed files with 1 additions and 0 deletions
@@ -506,6 +506,7 @@ class SidebarChatProvider implements vscode.WebviewViewProvider {
    private _getHtml(): string {
        return `<!DOCTYPE html>
 <html lang="ko"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1.0">
+<meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src https://fonts.gstatic.com; script-src 'unsafe-inline' https://cdnjs.cloudflare.com; img-src data:;">
 <title>Connect AI LAB</title>
 <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.9.0/styles/github-dark-dimmed.min.css">
 <style>