fix: do not mess up the CSP of the websites (#423, #503)

EdgeTranslate · Mar 31, 2023 · 51eaa6f · 51eaa6f
1 parent 413ec14
commit 51eaa6f
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/packages/EdgeTranslate/src/background/background.js b/packages/EdgeTranslate/src/background/background.js
@@ -315,14 +315,15 @@ chrome.webRequest.onHeadersReceived.addListener(
                           .replaceAll(
                               // Remove 'none' and "none".
                               /((^|;)\s*(default-src|script-src|img-src|connect-src))\s+['"]none['"]/g,
-                              "$1"
+                              "$1 "
                           )
                           .replaceAll(
                               // Add Google Page Translate related domains.
-                              /((^|;)\s*(default-src|script-src|img-src|connect-src))/g,
+                              // The last "\s" is added to prevent matching script-src-attr, script-src-elem, etc..
+                              /((^|;)\s*(default-src|script-src|img-src|connect-src))\s/g,
                               // eslint-disable-next-line prefer-template
                               "$1 translate.googleapis.com translate.google.com www.google.com www.gstatic.com " +
-                                  chrome.runtime.getURL("")
+                                  chrome.runtime.getURL(" ")
                           ),
                   }
                 : header