add content security policy (#7181)

IanMatthewHuff · web-flow · commit 8f5861e38998 · 2019-09-03T14:35:30.000-07:00
diff --git a/news/2 Fixes/7007.md b/news/2 Fixes/7007.md
@@ -0,0 +1 @@
+Set a content security policy on webviews
diff --git a/src/client/common/application/webPanel.ts b/src/client/common/application/webPanel.ts
@@ -132,6 +132,7 @@ export class WebPanel implements IWebPanel {
             <head>
                 <meta charset="utf-8">
                 <meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no">
+                <meta http-equiv="Content-Security-Policy" content="default-src 'unsafe-inline' 'unsafe-eval' vscode-resource: data: https: http:;">
                 <meta name="theme-color" content="#000000">
                 <meta name="theme" content="${Identifiers.GeneratedThemeName}"/>
                 <title>React App</title>

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+Set a content security policy on webviews`