search

asciidoctor / asciidoctor-vscode

AsciiDoc support for Visual Studio Code using Asciidoctor
Other
331 stars 97 forks source link

MathJax violates CSP in strict mode #779

Closed ggrossetie closed 1 year ago

ggrossetie commented 1 year ago 
Refused to load the script 'https://file+.vscode-resource.vscode-cdn.net/path/to/.vscode/extensions/asciidoctor.asciidoctor-vscode-3.1.3/media/mathjax/config/TeX-MML-AM_HTMLorMML.js?V=2.7.9' because it violates the following Content Security Policy directive: "script-src 'nonce-1692104515401401' 'sha256-ZrDBcrmObbqhVV/Mag2fT/y08UJGejdW7UWyEsi4DXw='".
Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
<script src="https://file%2B.vscode-resource.vscode-cdn.net/path/to/.vscode/extensions/asciidoctor.asciidoctor-vscode-3.1.3/media/mathjax/MathJax.js?config=TeX-MML-AM_HTMLorMML" nonce="1692104515401401"></script>
ggrossetie commented 1 year ago

I think we need to add script-src-elem https://file+.vscode-resource.vscode-cdn.net/