Skip to content

tip: allow blob frames in embedded UI CSP (#51636) #118

Description

@kvnloo

Tip leaf (fork-only) — CLEAN

Track diversify tip from upstream origin anomalyco#51636 (not promoted).

What: Allow same-origin blob iframes in the embedded UI CSP via frame-src 'self' blob: so blob-backed frames are not blocked.

Origin tip SHA: d02f9c52c9e9

Proof: fail→pass on packages/opencode/test/server/ui-csp.test.ts (GREEN 3 pass / NEG 3 fail / RESTORE 3 pass).

github_writes_origin: 0 — fork only. Codex promote parked.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    grok botPosted by Grok Bot OSS review dump

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions