Add CSP to shared process

microsoft · Jun 16, 2017 · 3270218 · 3270218
1 parent 062abef
commit 3270218
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/src/vs/code/electron-browser/sharedProcess.html b/src/vs/code/electron-browser/sharedProcess.html
@@ -4,6 +4,7 @@
 
 <head>
 	<meta charset="utf-8" />
+	<meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self';">
 </head>
 
 <body aria-label="">

diff --git a/src/vs/code/electron-main/sharedProcess.ts b/src/vs/code/electron-main/sharedProcess.ts
@@ -22,7 +22,14 @@ export class SharedProcess implements ISharedProcess {
 
 	@memoize
 	private get _whenReady(): TPromise<void> {
-		this.window = new BrowserWindow({ show: false });
+		this.window = new BrowserWindow({
+			show: false,
+			webPreferences: {
+				images: false,
+				webaudio: false,
+				webgl: false
+			}
+		});
 		const config = assign({
 			appRoot: this.environmentService.appRoot,
 			nodeCachedDataDir: this.environmentService.nodeCachedDataDir,
-Original file line number
+Diff line change
@@ Expand Up / @@ -4,6 +4,7 @@ @@
     <head>
     	<meta charset="utf-8" />
+    	<meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self';">
     </head>
     <body aria-label="">
@@ Expand Down @@