Skip to content

fix: resolve CSP violations by removing inline styles and allowing da… #12

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
OpenTester007 merged 1 commit into from
Jun 30, 2026
Merged

fix: resolve CSP violations by removing inline styles and allowing da… #12

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion manifest.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@
"http://127.0.0.1/*"
],
"content_security_policy": {
"extension_pages": "default-src 'self'; connect-src https://integrate.api.nvidia.com https: http://localhost:* http://127.0.0.1:*; object-src 'none'"
"extension_pages": "default-src 'self'; connect-src https://integrate.api.nvidia.com https: http://localhost:* http://127.0.0.1:*; img-src 'self' data:; object-src 'none'"
},
"action": {
"default_popup": "popup.html",
Expand Down
12 changes: 6 additions & 6 deletions popup.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,11 +32,11 @@ <h2 class="text-title">AI 翻译助手</h2>
</div>
<label for="output" class="sr-only">输出结果</label>
<textarea id="output" class="translation-output" placeholder="结果将显示在这里..." readonly rows="8"></textarea>
<div class="control-row" style="margin-top:6px; width:100%">
<div class="control-row output-actions">
<button id="copyThinkBtn" class="action-btn">复制结果</button>
</div>
</div>
<div class="loading-indicator" style="display: none;">
<div class="loading-indicator">
<span class="loading-text">请稍等，正在处理...</span>
</div>
</section>
Expand Down Expand Up @@ -91,8 +91,8 @@ <h3 class="text-title">模型设置</h3>
</div>
</div>
</div>
<div style="margin-top: 20px;">
<button id="saveApiKeyBtn" class="action-btn full-width" style="padding: 12px;">
<div class="settings-save-container">
<button id="saveApiKeyBtn" class="action-btn full-width">
保存设置
</button>
</div>
Expand All @@ -105,8 +105,8 @@ <h3 class="text-title">模型设置</h3>
<h3 class="text-title">最近 10 条记录</h3>
</div>
<div class="history-container">
<ul id="historyList" class="history-list" style="margin-top:16px;"></ul>
<button id="clearHistoryBtn" class="action-btn full-width" style="margin-top: 14px;">
<ul id="historyList" class="history-list"></ul>
<button id="clearHistoryBtn" class="action-btn full-width">
清除历史记录
</button>
</div>
Expand Down
26 changes: 26 additions & 0 deletions style.css
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -649,4 +649,30 @@ body {
text-align: center;
font-size: 11px;
color: var(--text-secondary-color);
}

/* CSP compliance styles replacing previous inline styles */
.loading-indicator {
display: none; /* hidden by default, shown via JS */
}

.control-row.output-actions {
margin-top: 6px;
width: 100%;
}

.settings-save-container {
margin-top: 20px;
}

#saveApiKeyBtn {
padding: 12px;
}

#historyList {
margin-top: 16px;
}

#clearHistoryBtn {
margin-top: 14px;
}
Loading