From 9149870380bfd1bc382b514562228c770b9eb16f Mon Sep 17 00:00:00 2001 From: tuanaiseo Date: Thu, 28 May 2026 06:24:57 +0700 Subject: [PATCH] fix(security): missing content security policy in index.html The index.html file lacks a Content-Security-Policy meta tag. Since this is a Tauri application with a webview, without a CSP, the application is more vulnerable to XSS attacks if any user-controlled content is rendered, or if there are injection points in the rendered markdown or other content. Affected files: index.html Signed-off-by: tuanaiseo <221258316+tuanaiseo@users.noreply.github.com> --- index.html | 1 + 1 file changed, 1 insertion(+) diff --git a/index.html b/index.html index 15ea39005..2e7bae876 100644 --- a/index.html +++ b/index.html @@ -4,6 +4,7 @@ + LLM Wiki