fix(preview): harden sandbox and transformation

2026-08-26 03:34:52 -05:00
parent 656c14caf3
commit 7262e7730e
7 changed files with 125 additions and 17 deletions
@@ -2,6 +2,9 @@
 <html lang="en">
  <head>
    <meta charset="UTF-8" />
+    <!-- Preview documents use data: URLs. Any later navigation of that child
+         browsing context is denied before a network request is sent. -->
+    <meta http-equiv="Content-Security-Policy" content="frame-src data:;" />
    <link rel="icon" type="image/svg+xml" href="/n small.png" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>NexusOS</title>