Adjust CSP for message styles. Fixes adam-p#83.

jfx2006 · jfx2006 · commit f0fc6d01d07e · 2024-03-29T10:08:28.000-04:00
diff --git a/extension/compose_preview/preview_iframe.html b/extension/compose_preview/preview_iframe.html
@@ -9,11 +9,11 @@
 <head>
   <title></title>
   <meta charset="utf-8">
-  <meta
+  <meta id="MDHR_CSP"
     http-equiv="Content-Security-Policy"
-    content="default-src 'none'; style-src 'self' 'unsafe-inline' chrome://messagebody/skin/messageBody.css; img-src data: imap: cid: mid:; child-src 'none';" />
-  <link rel="important stylesheet" href="chrome://messagebody/skin/messageBody.css">
-  <style>
+    content="default-src 'none'; style-src 'unsafe-inline' chrome://messagebody/skin/messageBody.css; style-src-elem 'unsafe-eval' 'unsafe-inline'; style-src-attr 'unsafe-inline'; img-src data: imap: cid: mid:; child-src 'none';" />
+  <link id="MDHR_tb_style" rel="important stylesheet" href="chrome://messagebody/skin/messageBody.css">
+  <style id="MDHR_preview_style">
       html {
           height: calc(100% - 15px);
           width: calc(100% - 10px);
