Wrap into comment Content-Security-Policy meta tag

Signed-off-by: Vitaliy Gulyy <vgulyy@redhat.com>

packages/plugin-ext/src/main/browser/webview/webview.ts

@@ -365,7 +365,17 @@ export class WebviewWidget extends BaseWidget implements StatefulWidget {
     }
 
     protected preprocessHtml(value: string): string {
-        return value
+        console.log('--------------------------------------------------------------------------------------');
+        console.log(value);
+        console.log('--------------------------------------------------------------------------------------');
+        // Comment <meta http-equiv="Content-Security-Policy" /> tag in HEAD section
+        let html = value
+            .replace(/<\s*meta([^>]+?(?=Content-Security-Policy)[^>]+)\/?>/gsm, (_, group) => {
+                return `<!-- meta ${group} -->`;
+            });
+
+        // Update all links, using 'vscode-resource:' and 'theia-resource:' scheme 
+        return html
             .replace(/(["'])(?:vscode|theia)-resource:(\/\/([^\s\/'"]+?)(?=\/))?([^\s'"]+?)(["'])/gi, (_, startQuote, _1, scheme, path, endQuote) => {
                 if (scheme) {
                     return `${startQuote}${this.externalEndpoint}/theia-resource/${scheme}${path}${endQuote}`;