microsoft/vscode
1
0
Fork 0
mirror of https://github.com/microsoft/vscode.git synced 2026-07-14 07:34:28 -05:00
Code Issues Packages Projects Releases 177 Wiki Activity

trusted types - loader should use trusted script url when using script tags, https://github.com/microsoft/vscode/issues/103699

Browse Source
This commit is contained in:
Johannes Rieken
2021-01-07 11:13:53 +01:00
parent de9e9c414e
commit 4aff4b9923
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/bootstrap-window.js vendored
View File

@@ -99,6 +99,18 @@
preferScriptTags: useCustomProtocol
};
// use a trusted types policy when loading via script tags
if (loaderConfig.preferScriptTags) {
loaderConfig.trustedTypesPolicy = window.trustedTypes?.createPolicy('amdLoader', {
createScriptURL(value) {
if (value.startsWith(window.location.origin)) {
return value;
}
throw new Error(`Invalid script url: ${value}`);
}
});
}
// Enable loading of node modules:
// - sandbox: we list paths of webpacked modules to help the loader
// - non-sandbox: we signal that any module that does not begin with