Files
insomnia/packages
jackkav c0fc69445c feat(security): report-only Content-Security-Policy for renderer
Electron security checklist item 7. Adds a Content-Security-Policy-Report-Only
header to the index.html document served by the custom https protocol handler.
Report-only mode does not block any flow; Chromium logs violations to the
renderer console so the policy can be tuned from real data before a follow-up
flips it to enforcing.

Policy lives in content-security-policy.ts and is pinned by a unit test.
2026-07-14 18:35:58 +02:00
..