Use webview CSP source for style-src (#1170)

2022-02-25 16:03:58 +00:00
parent a5e02950c2
commit 735f177283
1 changed files with 1 additions and 1 deletions
--- a/extensions/ql-vscode/src/interface-utils.ts
+++ b/extensions/ql-vscode/src/interface-utils.ts
@@ -134,7 +134,7 @@ export function getHtmlForWebview(
    : stylesheetWebviewUris.map(uri => createStylesLinkWithNonce(nonce, uri));

  const styleSrc = allowInlineStyles
-    ? 'https://*.vscode-webview.net/ vscode-file: \'unsafe-inline\''
+    ? `${webview.cspSource} vscode-file: 'unsafe-inline'`
    : `'nonce-${nonce}'`;

  /*