fix: restrict asset protocol to vaults

This commit is contained in:
Yuri Karamian
2026-08-17 20:14:34 +02:00
parent 111d819f92
commit 81e4e26290
5 changed files with 93 additions and 1 deletions
+5 -1
View File
@@ -27,7 +27,11 @@
"csp": "default-src 'self'; img-src 'self' asset: http://asset.localhost imgproxy: http://imgproxy.localhost https: blob: data:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; frame-src 'self' asset: http://asset.localhost",
"assetProtocol": {
"enable": true,
"scope": ["**/*", "/**", "**/.helixnotes/**"]
"scope": {
"allow": [],
"deny": [],
"requireLiteralLeadingDot": true
}
}
}
},