SQL Operations Studio Public Preview 1 (0.23) release source code

extensions/markdown/media/csp.js

@@ -0,0 +1,42 @@
+/*---------------------------------------------------------------------------------------------
+ *  Copyright (c) Microsoft Corporation. All rights reserved.
+ *  Licensed under the Source EULA. See License.txt in the project root for license information.
+ *--------------------------------------------------------------------------------------------*/
+
+'use strict';
+
+(function () {
+	const settings = JSON.parse(document.getElementById('vscode-markdown-preview-data').getAttribute('data-settings'));
+	const strings = JSON.parse(document.getElementById('vscode-markdown-preview-data').getAttribute('data-strings'));
+
+	let didShow = false;
+
+	const showCspWarning = () => {
+		if (didShow) {
+			return;
+		}
+		didShow = true;
+		const args = [settings.previewUri];
+
+		const notification = document.createElement('a');
+		notification.innerText = strings.cspAlertMessageText;
+		notification.setAttribute('id', 'code-csp-warning');
+		notification.setAttribute('title', strings.cspAlertMessageTitle);
+
+		notification.setAttribute('role', 'button');
+		notification.setAttribute('aria-label',  strings.cspAlertMessageLabel);
+		notification.setAttribute('href', `command:markdown.showPreviewSecuritySelector?${encodeURIComponent(JSON.stringify(args))}`);
+
+		document.body.appendChild(notification);
+	};
+
+	document.addEventListener('securitypolicyviolation', () => {
+		showCspWarning();
+	});
+
+	window.addEventListener('message', (event) => {
+		if (event && event.data && event.data.name === 'vscode-did-block-svg') {
+			showCspWarning();
+		}
+	});
+}());