Strengthen CSP

2026-07-03 01:18:32 +00:00 · 2025-02-14 15:24:39 +05:30
1 changed files with 1 additions and 2 deletions
--- a/packages/bruno-electron/src/index.js
+++ b/packages/bruno-electron/src/index.js
@@ -30,8 +30,7 @@ const lastOpenedCollections = new LastOpenedCollections();
 // Reference: https://content-security-policy.com/
 const contentSecurityPolicy = [
  "default-src 'self'",
-  "script-src * 'unsafe-inline' 'unsafe-eval'",
-  "connect-src * 'unsafe-inline'",
+  "connect-src 'self' https://*.posthog.com",
  "font-src 'self' https:",
  // this has been commented out to make oauth2 work
  // "form-action 'none'",