forked from BasedHardware/omi
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathindex.html
More file actions
50 lines (49 loc) · 1.79 KB
/
Copy pathindex.html
File metadata and controls
50 lines (49 loc) · 1.79 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
<!doctype html>
<html>
<head>
<meta charset="UTF-8" />
<title>omi</title>
<!-- https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP -->
<!-- Sign-in runs in the SYSTEM browser via main (src/main/ipc/auth.ts) —
the popup-era allowances (frame-src firebaseapp/accounts.google,
script-src apis.google/gstatic) were removed in the Phase 8 sweep.
cdn.jsdelivr.net stays: @ricky0123/vad-web fetches its worklet/wasm
from there. -->
<meta
http-equiv="Content-Security-Policy"
content="
default-src 'self';
script-src 'self' 'unsafe-eval' 'wasm-unsafe-eval' blob: https://cdn.jsdelivr.net;
style-src 'self' 'unsafe-inline';
img-src 'self' data: blob: https: https://*.googleusercontent.com;
font-src 'self' data:;
media-src 'self' blob:;
connect-src 'self'
https://identitytoolkit.googleapis.com
https://securetoken.googleapis.com
https://www.googleapis.com
https://*.firebaseapp.com
https://*.firebaseio.com
https://firebase.googleapis.com
https://api.omi.me
wss://api.omi.me
https://desktop-backend-hhibjajaja-uc.a.run.app
https://api.openai.com
wss://api.openai.com
https://generativelanguage.googleapis.com
wss://generativelanguage.googleapis.com
https://api.deepgram.com
wss://api.deepgram.com
https://accounts.google.com
https://us.i.posthog.com
https://cdn.jsdelivr.net;
frame-src 'self';
worker-src 'self' blob:;
"
/>
</head>
<body style="background: transparent">
<div id="root" style="background: transparent"></div>
<script type="module" src="/src/main.tsx"></script>
</body>
</html>