vscode/src/vs/code/electron-browser/workbench/workbench.html

<!-- Copyright (C) Microsoft Corporation. All rights reserved. -->
<!DOCTYPE html>
<html>
	<head>
		<meta charset="utf-8" />
		<meta http-equiv="Content-Security-Policy" content="default-src 'none'; img-src 'self' https: data: blob: vscode-remote-resource:; media-src 'none'; frame-src 'self' vscode-webview:; object-src 'self'; script-src 'self' 'unsafe-eval' blob:; style-src 'self' 'unsafe-inline'; connect-src 'self' https: ws:; font-src 'self' https: vscode-remote-resource:;">
		<meta http-equiv="Content-Security-Policy" content="require-trusted-types-for 'script'; trusted-types TrustedFunctionWorkaround ExtensionScripts amdLoader cellRendererEditorText defaultWorkerFactory diffEditorWidget editorGhostText domLineBreaksComputer editorViewLayer diffReview extensionHostWorker dompurify notebookRenderer safeInnerHtml standaloneColorizer tokenizeToString webNestedWorkerExtensionHost;">
	</head>
	<body aria-label="">
	</body>

	<!-- Init Bootstrap Helpers -->
	<script src="../../../../bootstrap.js"></script>
	<script src="../../../../vs/loader.js"></script>
	<script src="../../../../bootstrap-window.js"></script>

	<!-- Startup via workbench.js -->
	<script src="workbench.js"></script>
</html>
isolate index.js from index.html 2016-08-08 16:52:32 +02:00			`<!-- Copyright (C) Microsoft Corporation. All rights reserved. -->`
			`<!DOCTYPE html>`
			`<html>`
			`<head>`
			`<meta charset="utf-8" />`
Fixes #126808: Convert `file:` URIs to `vscode-file:` also in the web worker extension host when executing on the desktop. 2021-06-21 17:05:09 +02:00			`<meta http-equiv="Content-Security-Policy" content="default-src 'none'; img-src 'self' https: data: blob: vscode-remote-resource:; media-src 'none'; frame-src 'self' vscode-webview:; object-src 'self'; script-src 'self' 'unsafe-eval' blob:; style-src 'self' 'unsafe-inline'; connect-src 'self' https: ws:; font-src 'self' https: vscode-remote-resource:;">`
Switch to dompurify for sanitizing markdown content (#131950) * Switch to dompurify for sanitizing markdown content Switches us from using `insane` to instead use `dompurify`, which seems to be better maintained and also has some nice features, such as built-in trusted types support I've tried to port over our existing sanitizer settings as best as possible, but there's not always a 1:1 mapping between how insane works and how dompurify does. I'd like to get this change in early in the iteration to catch potential regressions * Remove logging and renaming param * Move dompurify to browser layer * Fixing tests and how we check valid attributes * Allow innerhtml in specific files * Use isEqualNode instead of checking innerHTML directly innerHTML can return different results on different browsers. Use `isEqualNode` instead * Reapply fix for trusted types * Enable ALLOW_UNKNOWN_PROTOCOLS I beleive this is required since we allow links to commands and loading images over remote * in -> of * Fix check of protocol * Enable two more safe tags 2021-09-03 21:17:02 +02:00			`<meta http-equiv="Content-Security-Policy" content="require-trusted-types-for 'script'; trusted-types TrustedFunctionWorkaround ExtensionScripts amdLoader cellRendererEditorText defaultWorkerFactory diffEditorWidget editorGhostText domLineBreaksComputer editorViewLayer diffReview extensionHostWorker dompurify notebookRenderer safeInnerHtml standaloneColorizer tokenizeToString webNestedWorkerExtensionHost;">`
isolate index.js from index.html 2016-08-08 16:52:32 +02:00			`</head>`
Themes: set classes to the <body> element. Fixes #92953 2020-05-09 13:25:21 +02:00			`<body aria-label="">`
proper fix for window background flashing 2016-08-18 09:09:40 +02:00			`</body>`

Drop node.js require for bootstrap and bootstrap-window (#100857) * sandbox - load bootstrap/bootstrap-window via script tags (workbench) * sandbox - adopt script loading for issue reporter and process explorer 2020-06-24 09:07:14 +02:00			`<!-- Init Bootstrap Helpers -->`
			`<script src="../../../../bootstrap.js"></script>`
Load loader.js via a `<script>` tag 2020-06-24 17:19:11 +02:00			`<script src="../../../../vs/loader.js"></script>`
Drop node.js require for bootstrap and bootstrap-window (#100857) * sandbox - load bootstrap/bootstrap-window via script tags (workbench) * sandbox - adopt script loading for issue reporter and process explorer 2020-06-24 09:07:14 +02:00			`<script src="../../../../bootstrap-window.js"></script>`

tiny tweaks 2019-08-07 10:16:31 +02:00			`<!-- Startup via workbench.js -->`
			`<script src="workbench.js"></script>`
wip 2019-04-09 20:11:19 +02:00			`</html>`