fix csp issue

ShMcK · ShMcK · commit 54d146e50664 · 2020-01-11T18:37:50.000-08:00
diff --git a/src/webview/render.ts b/src/webview/render.ts
@@ -66,10 +66,12 @@ async function render(panel: vscode.WebviewPanel, rootPath: string) {
   cspMeta.httpEquiv = 'Content-Security-Policy'
   cspMeta.content =
     [
+      `default-src 'self'`,
+      `connect-src https: http:`,
       `font-src ${panel.webview.cspSource} http: https: data:`,
       `img-src ${panel.webview.cspSource} https:`,
       `script-src ${nonces.map(nonce => `'nonce-${nonce}'`).join(' ')} data:`,
-      `style-src ${panel.webview.cspSource} https:`,
+      `style-src ${panel.webview.cspSource} https: 'self' 'unsafe-inline'`,
     ].join('; ') + ';'
   document.head.appendChild(cspMeta)
 
