mirror of
https://github.com/Kong/insomnia.git
synced 2026-07-30 17:26:28 -04:00
Electron security checklist item 7. Adds a Content-Security-Policy-Report-Only header to the index.html document served by the custom https protocol handler. Report-only mode does not block any flow; Chromium logs violations to the renderer console so the policy can be tuned from real data before a follow-up flips it to enforcing. Policy lives in content-security-policy.ts and is pinned by a unit test.