From 75cea13cc98337d2716fa4097cbe2ff1016fc6dd Mon Sep 17 00:00:00 2001 From: Feiyang Liu Date: Mon, 9 Feb 2026 09:48:50 +0000 Subject: [PATCH] relax CSP policy to address vim extension installation problem --- .../common/preapplied/remove-unsafe-headers.diff | 15 +-------------- ...fe-eval-and-unsafe-inline-from-csp-direct.diff | 4 ++-- 2 files changed, 3 insertions(+), 16 deletions(-) diff --git a/patches/common/preapplied/remove-unsafe-headers.diff b/patches/common/preapplied/remove-unsafe-headers.diff index b3e45f2..4305934 100644 --- a/patches/common/preapplied/remove-unsafe-headers.diff +++ b/patches/common/preapplied/remove-unsafe-headers.diff @@ -49,17 +49,4 @@ Index: third-party-src/src/vs/workbench/contrib/notebook/browser/view/renderers/ + script-src ${webviewGenericCspSource} 'unsafe-inline' 'wasm-unsafe-eval'; style-src ${webviewGenericCspSource} 'unsafe-inline'; img-src ${webviewGenericCspSource} https: http: data:; - font-src ${webviewGenericCspSource} https:; -Index: third-party-src/src/vs/workbench/services/extensions/worker/webWorkerExtensionHostIframe.html -=================================================================== ---- third-party-src.orig/src/vs/workbench/services/extensions/worker/webWorkerExtensionHostIframe.html -+++ third-party-src/src/vs/workbench/services/extensions/worker/webWorkerExtensionHostIframe.html -@@ -4,7 +4,7 @@ - - - + font-src ${webviewGenericCspSource} https:; \ No newline at end of file diff --git a/patches/web-embedded/remove-unsafe-eval-and-unsafe-inline-from-csp-direct.diff b/patches/web-embedded/remove-unsafe-eval-and-unsafe-inline-from-csp-direct.diff index 06b6844..9a972c9 100644 --- a/patches/web-embedded/remove-unsafe-eval-and-unsafe-inline-from-csp-direct.diff +++ b/patches/web-embedded/remove-unsafe-eval-and-unsafe-inline-from-csp-direct.diff @@ -65,8 +65,8 @@ Index: third-party-src/src/vs/workbench/services/extensions/worker/webWorkerExte - \ No newline at end of file +