Microsoft/vscode
1
0
Fork 0
mirror of https://github.com/microsoft/vscode.git synced 2026-04-25 11:08:51 +01:00
Code Issues Packages Projects Releases Wiki Activity

add --trusted-types flag to yarn web

Browse Source
This commit is contained in:
Johannes Rieken
2020-09-03 14:56:08 +02:00
parent 7fc71f6bfb
commit 6df356f2a0
1 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
resources/web/code-web.js
View File

@@ -36,7 +36,8 @@ const args = minimist(process.argv, {
'help',
'verbose',
'wrap-iframe',
'enable-sync'
'enable-sync',
'trusted-types'
],
string: [
'scheme',
@@ -53,6 +54,7 @@ if (args.help) {
'yarn web [options]\n' +
' --no-launch Do not open VSCode web in the browser\n' +
' --wrap-iframe Wrap the Web Worker Extension Host in an iframe\n' +
' --trusted-types Enable trusted types (report only)\n' +
' --enable-sync Enable sync by default\n' +
' --scheme Protocol (https or http)\n' +
' --host Remote host\n' +
@@ -396,7 +398,13 @@ async function handleRoot(req, res) {
.replace('{{WEBVIEW_ENDPOINT}}', '')
.replace('{{REMOTE_USER_DATA_URI}}', '');
res.writeHead(200, { 'Content-Type': 'text/html' });
const headers = { 'Content-Type': 'text/html' };
if (args['trusted-types']) {
headers['Content-Security-Policy-Report-Only'] = 'require-trusted-types-for \'script\';';
}
res.writeHead(200, headers);
return res.end(data);
}