fix built by serving https

This commit is contained in:
LC mac
2026-02-12 19:08:46 +08:00
parent 14c1b39e40
commit ae0c32fe67
12 changed files with 67 additions and 647 deletions

View File

@@ -6,22 +6,8 @@
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" />
<title>SeedPGP v__APP_VERSION__</title>
<!-- Content Security Policy: Prevent XSS, malicious extensions, and external script injection -->
<meta http-equiv="Content-Security-Policy" content="
default-src 'none';
script-src 'self' 'wasm-unsafe-eval';
style-src 'self' 'unsafe-inline';
img-src 'self' data:;
connect-src 'none';
form-action 'none';
frame-ancestors 'none';
base-uri 'self';
upgrade-insecure-requests;
block-all-mixed-content
" />
<link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'><rect width='100' height='100' rx='20' fill='%230d0d0d'/><text x='50' y='65' font-family='Arial' font-size='82' font-weight='bold' text-anchor='middle' fill='%23f7931a'>₿</text><circle cx='50' cy='50' r='38' fill='none' stroke='white' stroke-width='6' opacity='0.7'/></svg>">
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<meta http-equiv="X-Frame-Options" content="DENY" />
<meta http-equiv="X-Content-Type-Options" content="nosniff" />
<meta name="referrer" content="no-referrer" />
</head>
<body>