From 08d622106e652bf47a09d08be8a6c251b7653cb3 Mon Sep 17 00:00:00 2001
From: Red-Asuka <liyd0623@gmail.com>
Date: Wed, 27 Nov 2024 14:33:37 +0800
Subject: [PATCH] fix(csp): tighten Content Security Policy by removing
 'unsafe-eval' from script-src

---
 apps/desktop/src/renderer/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/desktop/src/renderer/index.html b/apps/desktop/src/renderer/index.html
index f2d2deabe..f6f0a66f5 100644
--- a/apps/desktop/src/renderer/index.html
+++ b/apps/desktop/src/renderer/index.html
@@ -7,7 +7,7 @@
     <!-- https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP -->
     <meta
       http-equiv="Content-Security-Policy"
-      content="default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:"
+      content="default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:"
     />
   </head>