From 55d2f8b8fdbebf591d759a72022527c226aad840 Mon Sep 17 00:00:00 2001
From: Marius Lindvall <marius@varden.info>
Date: Tue, 30 Mar 2021 18:03:55 +0200
Subject: [PATCH] Set Content-Security-Policy

---
 frontend/index.html |  5 +++--
 frontend/style.css  | 10 ++++++++++
 2 files changed, 13 insertions(+), 2 deletions(-)
diff --git a/frontend/index.html b/frontend/index.html
index 0c69701..56fc2f7 100644
--- a/frontend/index.html
+++ b/frontend/index.html
@@ -2,6 +2,7 @@
 <html>
     <head>
         <meta charset="UTF-8">
+        <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self'; style-src 'self'; img-src * data:; connect-src 'self'; font-src 'none'; object-src 'none'; media-src 'none'; frame-src 'none'; form-action 'none'; worker-src 'none'; manifest-src 'none';">
 
         <!-- Load Leaflet for the map. -->
         <link rel="stylesheet" href="./lib/leaflet/1.6.0/leaflet.css" />
@@ -57,13 +58,13 @@
 
         <div class="cover hidden" id="searching">
             <img src="./assets/location-pending.svg" class="pending">
-            <p class="header" style="margin-top:0;" data-i18n="gnss_signal_head"></p>
+            <p class="header" data-i18n="gnss_signal_head"></p>
             <p class="body" data-i18n="gnss_signal_body"></p>
         </div>
 
         <div class="cover hidden" id="index">
             <img src="./assets/logo.svg" class="logo">
-            <p class="body" style="margin-top:7vmin;" data-i18n="point_app_to"></p>
+            <p class="body point-app-to" data-i18n="point_app_to"></p>
             <p class="body" id="url">https://localhost/</p>
             <p class="body"><a href="https://f-droid.org/packages/info.varden.hauk">
                 <img data-i18n="f_droid_badge_text"
diff --git a/frontend/style.css b/frontend/style.css
index ca776d2..4967b12 100644
--- a/frontend/style.css
+++ b/frontend/style.css
@@ -61,6 +61,16 @@ body {
     font-weight: bold;
 }
 
+/* Searching for GNSS signal header (SVG image above, no need for margin). */
+#searching > p.header {
+    margin-top: 0;
+}
+
+/* Default page header. (Logo above, need custom margin.) */
+.point-app-to {
+    margin-top: 7vmin;
+}
+
 /* Popup information. */
 .cover > p.body {
     font-size: 4vmin;
