Csp elements #1588
Annotations
3 errors
build:
packages/vscode/src/webview.ts#L13
The variable `url` is declared but not used. Consider removing it to clean up the code.
|
build:
packages/vscode/src/webview.ts#L67
The use of `'unsafe-inline'` in the CSP header poses a security risk. It allows inline styles and scripts, which can be exploited by attackers. Consider using a nonce or hash for safer content security.
|
build:
packages/vscode/src/webview.ts#L83
The variable `vscodeWebviewPlaygroundNonce` is assigned but never used. It should either be used in the script or removed to avoid unnecessary memory usage.
|