From 2f4adbab2cbefba1898b4ce6f8ff5e03622cfd34 Mon Sep 17 00:00:00 2001 From: toasted-nutbread Date: Fri, 18 Sep 2020 21:16:39 -0400 Subject: Handlebars sandbox (#612) * Set up template renderer proxy * Use proxy * Remove unused handlebars script tags * Update manifest --- dev/data/manifest-variants.json | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) (limited to 'dev/data') diff --git a/dev/data/manifest-variants.json b/dev/data/manifest-variants.json index 6d80d73d..587a41f8 100644 --- a/dev/data/manifest-variants.json +++ b/dev/data/manifest-variants.json @@ -67,6 +67,12 @@ "page": "bg/settings.html", "open_in_tab": true }, + "sandbox": { + "pages": [ + "bg/template-renderer.html" + ], + "content_security_policy": "sandbox allow-scripts; script-src 'self' 'unsafe-eval'; object-src 'self'" + }, "permissions": [ "", "storage", @@ -94,7 +100,8 @@ } }, "web_accessible_resources": [ - "fg/float.html" + "fg/float.html", + "bg/template-renderer.html" ], "content_security_policy": "script-src 'self' 'unsafe-eval'; object-src 'self'", "applications": { -- cgit v1.2.3