marcus.hinz/ai-control
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

CSP: style-src ohne unsafe-inline — Fenster-Styles aus den HTML-Köpfen nach src/*-window.css

Browse Source 
terminal/panel/popup.html laden ihre Styles jetzt als erste Imports der
jeweiligen Entries (Kaskade wie zuvor: Fenster-CSS vor xterm/fonts); devCsp
behält unsafe-inline für die Vite-HMR-Style-Injektion.
This commit is contained in:
marcus hinz
2026-07-21 19:04:36 +02:00
parent bbb06e0814
commit e7f98dd072
10 changed files with 823 additions and 824 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/terminal.ts
+3
View File
@@ -2,6 +2,9 @@ import { Terminal } from "@xterm/xterm";
import { FitAddon } from "@xterm/addon-fit";
import { WebglAddon } from "@xterm/addon-webgl";
import { LigaturesAddon } from "@xterm/addon-ligatures";
// Fenster-Styles zuerst, damit die Kaskade der früheren <head>-Reihenfolge
// entspricht (Fenster-CSS vor xterm/fonts). CSP: kein style-src unsafe-inline.
import "./terminal-window.css";
import "@xterm/xterm/css/xterm.css";
import "@fontsource/jetbrains-mono/400.css";
import "@fontsource/jetbrains-mono/500.css";