electron / fiddle

88%

main: 87%

LAST BUILD ON BRANCH security/tighten-csp

branch: security/tighten-csp

CHANGE BRANCH

x

Reset

• security/tighten-csp
• add-read-permissions
• add-webcontentsview-example
• anny/update-eqs-references
• bisect-skip
• bug-reaper/core-audio-tap-api
• build-workflow
• build/bump-brace-expansion
• build/bump-copy-webpack-plugin
• build/bump-electron-rebuild
• build/bump-express
• build/bump-fiddle-core-2
• build/bump-fiddle-core-2-20
• build/bump-fuses
• build/bump-lint-roller
• build/bump-lint-staged
• build/bump-maker-appimage
• build/bump-markdownlint-cli2
• build/bump-package-json-dep
• build/bump-sentry
• build/bump-sentry-electron
• build/bump-shell-env
• build/bump-typescript-config
• build/bump-vitest
• build/clear-lint-warnings
• build/drop-electron-default-menu
• build/drop-tmp
• build/drop-tslib
• build/electron-42
• build/fix-contributors-rate-limit
• build/fix-msix-windows-sign-options
• build/fix-namor
• build/forge-8-alpha-9
• build/jsdom
• build/move-devtools-installer-to-dev-deps
• build/refactor-start-fiddle-ipc
• build/remove-package-json-dep
• build/roll-back-windows-sign
• build/switch-devtron
• build/tsx-dev-dep
• build/update-lint-roller
• build/update-lint-roller-fix
• build/update-notarize
• build/update-reforged
• build/use-windows-sign-node22
• build/windows-sign-bump
• build/yarn-dedupe
• bump-version-0.38.1
• chore/add-devtron
• chore/bump-electron-33
• chore/clean-up-tsconfig.json
• chore/drop-dead-code
• chore/fix-tsc-compilation
• chore/nvmrc
• chore/refactor-ipc
• chore/remove-local-versions-migration
• chore/remove-unused-variable
• ci-linux-build-bump-resource
• ci-load-macos-secrets
• ci-test-non-signed-windows
• ci/add-missing-perm-release-workflow
• ci/digicert-action-switch
• ci/fix-getsentry
• ci/fix-windows-release-step
• ci/fix-windows-signing-release
• ci/fixup-workflows
• ci/gha-release-workflow
• ci/gha-test-workflow
• ci/github-app-token-release
• ci/linux-build-bump-resource
• ci/macos-latest-xlarge
• ci/native-macos-intel
• ci/release-job-macos-latest-large
• ci/release-windows-secret
• ci/sentry-auth-token
• ci/tests-arm64-ubuntu
• ci/use-secret-service-action
• ci/windows-d-drive-speedup
• ci/workflow-fixes
• ci/zizmor-audit-fixes
• claude/slack-session-LrFFw
• clear-console
• dedupe-deps
• dependabot/github_actions/actions/checkout-5.0.0
• dependabot/github_actions/actions/checkout-5.0.1
• dependabot/github_actions/actions/checkout-6.0.0
• dependabot/github_actions/actions/checkout-6.0.1
• dependabot/github_actions/actions/checkout-6.0.2
• dependabot/github_actions/actions/checkout-6.0.3
• dependabot/github_actions/actions/checkout-7.0.0
• dependabot/github_actions/actions/download-artifact-6.0.0
• dependabot/github_actions/actions/download-artifact-7.0.0
• dependabot/github_actions/actions/download-artifact-8.0.0
• dependabot/github_actions/actions/download-artifact-8.0.1
• dependabot/github_actions/actions/github-script-8.0.0
• dependabot/github_actions/actions/github-script-9.0.0
• dependabot/github_actions/actions/setup-node-4.2.0
• dependabot/github_actions/actions/setup-node-4.3.0
• dependabot/github_actions/actions/setup-node-4.4.0
• dependabot/github_actions/actions/setup-node-5.0.0
• dependabot/github_actions/actions/setup-node-6.0.0
• dependabot/github_actions/actions/setup-node-6.1.0
• dependabot/github_actions/actions/setup-node-6.2.0
• dependabot/github_actions/actions/setup-node-6.3.0
• dependabot/github_actions/actions/setup-node-6.4.0
• dependabot/github_actions/actions/upload-artifact-5.0.0
• dependabot/github_actions/actions/upload-artifact-6.0.0
• dependabot/github_actions/actions/upload-artifact-7.0.0
• dependabot/github_actions/actions/upload-artifact-7.0.1
• dependabot/github_actions/amannn/action-semantic-pull-request-6.0.1
• dependabot/github_actions/amannn/action-semantic-pull-request-6.1.0
• dependabot/github_actions/amannn/action-semantic-pull-request-6.1.1
• dependabot/github_actions/coverallsapp/github-action-2.3.6
• dependabot/github_actions/coverallsapp/github-action-2.3.7
• dependabot/github_actions/digicert/ssm-code-signing-1.2.0
• dependabot/github_actions/digicert/ssm-code-signing-1.2.1
• dependabot/github_actions/dsanders11/project-actions-1.5.0
• dependabot/github_actions/dsanders11/project-actions-1.5.1
• dependabot/github_actions/dsanders11/project-actions-1.5.2
• dependabot/github_actions/dsanders11/project-actions-1.7.0
• dependabot/github_actions/dsanders11/project-actions-2.0.0
• dependabot/github_actions/dsanders11/project-actions-2.0.1
• dependabot/github_actions/electron/github-app-auth-action-2.1.0
• dependabot/github_actions/getsentry/action-release-3.4.0
• dependabot/github_actions/getsentry/action-release-3.5.0
• dependabot/github_actions/getsentry/action-release-3.6.0
• dependabot/github_actions/getsentry/action-release-3.6.1
• dependabot/github_actions/getsentry/action-release-3.7.0
• dependabot/npm_and_yarn/babel/runtime-7.27.0
• dependabot/npm_and_yarn/brace-expansion-1.1.12
• dependabot/npm_and_yarn/brace-expansion-1.1.15
• dependabot/npm_and_yarn/brace-expansion-5.0.6
• dependabot/npm_and_yarn/electron-36.8.1
• dependabot/npm_and_yarn/electron-40.8.3
• dependabot/npm_and_yarn/electron-40.8.4
• dependabot/npm_and_yarn/electron-42.3.3
• dependabot/npm_and_yarn/fast-uri-3.1.2
• dependabot/npm_and_yarn/flatted-3.4.1
• dependabot/npm_and_yarn/flatted-3.4.2
• dependabot/npm_and_yarn/follow-redirects-1.16.0
• dependabot/npm_and_yarn/form-data-4.0.4
• dependabot/npm_and_yarn/http-proxy-middleware-2.0.9
• dependabot/npm_and_yarn/ip-address-10.1.1
• dependabot/npm_and_yarn/isaacs/brace-expansion-5.0.1
• dependabot/npm_and_yarn/lodash-4.17.23
• dependabot/npm_and_yarn/lodash-4.18.1
• dependabot/npm_and_yarn/nanoid-3.3.8
• dependabot/npm_and_yarn/node-forge-1.3.2
• dependabot/npm_and_yarn/picomatch-2.3.2
• dependabot/npm_and_yarn/postcss-8.5.10
• dependabot/npm_and_yarn/rollup-4.59.0
• dependabot/npm_and_yarn/serialize-javascript-6.0.2
• dependabot/npm_and_yarn/shell-quote-1.8.4
• dependabot/npm_and_yarn/simple-git-3.32.3
• dependabot/npm_and_yarn/simple-git-3.36.0
• dependabot/npm_and_yarn/tar-7.5.13
• dependabot/npm_and_yarn/tar-7.5.16
• dependabot/npm_and_yarn/tmp-0.2.4
• dependabot/npm_and_yarn/tmp-0.2.7
• dependabot/npm_and_yarn/undici-6.27.0
• dependabot/npm_and_yarn/vite-7.1.12
• dependabot/npm_and_yarn/vite-7.1.5
• dependabot/npm_and_yarn/vite-8.0.16
• dependabot/npm_and_yarn/vite-8.0.5
• dependabot/npm_and_yarn/webpack-5.104.1
• dependabot/npm_and_yarn/xmldom/xmldom-0.8.12
• dependabot/npm_and_yarn/xmldom/xmldom-0.8.13
• deps/bump-namor-to-3.0.3
• devtools-installer
• devtron-2.1.1
• devtron-ipc-fix
• digest
• e39
• e3911
• erick/markers
• feat/1551-run-from-asar
• feat/add-fetch-example-to-main
• feat/only-accept-IPC-from-our-BrowserWindows
• feat/surface-app-name
• felixr/bump-electron-40
• felixr/enzyme-to-rtl
• felixr/enzyme-to-rtl-v2
• felixr/react-18
• felixr/react-18-core
• felixr/react-18-upgrade
• fiddle-0.37.3
• fiddle-history
• fiddle-show-me-udd
• fix-endless-spinner
• fix-history-update
• fix-local-package
• fix-sidebar-buttons
• fix-string-concat
• fix/1085-inconsistent-focus-indicators
• fix/1274-titlebar-responsive
• fix/Deprecated-tooltip-and-popover-components
• fix/default-theme
• fix/github-tokens-in-main-process
• fix/improve-path-sanitization
• fix/initial-use-system-theme-isolated-run-button
• fix/macos-tmpdir
• fix/minimal-repro-rename
• fix/rename-main-entry-points
• fix/tmp-dirsync
• fix/tooltip-regressions
• fix/wait-for-watcher-ready
• forge-7-8-1
• forge-7.10.2
• forge-7.7.0
• forge-7.9.0
• forge-8
• forge-alpha-6
• forge8alpha8
• gha-done
• improve-local-builds
• incorrect-loadurl-usage
• ipc-cleanup
• ipc-hardening
• main
• master
• msix
• multi-main
• new-release
• npm-modules-disabled
• patch-1
• patch-msix
• patch-release
• prettier-3.6
• prettier-format
• refactor/fewer-mocks-in-github-tests
• refactor/isolate-zee-run-button-now
• refactor/move-github-tokens-to-main
• refactor/protect-github-credentials
• refactor/push-output
• refactor/remove-unused-github-account-info
• refs/tags/v0.0.0-testing1
• refs/tags/v0.0.0-testing2
• refs/tags/v0.0.0-testing3
• refs/tags/v0.0.0-testing31
• refs/tags/v0.0.0-testing311
• refs/tags/v0.0.0-testing4
• refs/tags/v0.0.0-testing5
• refs/tags/v0.0.0-testing6
• refs/tags/v0.17.0
• refs/tags/v0.17.1
• refs/tags/v0.17.2
• refs/tags/v0.17.3
• refs/tags/v0.17.4
• refs/tags/v0.17.5
• refs/tags/v0.17.6
• refs/tags/v0.17.7
• refs/tags/v0.18.0
• refs/tags/v0.19.0
• refs/tags/v0.20.0
• refs/tags/v0.21.0
• refs/tags/v0.22.0
• refs/tags/v0.23.0
• refs/tags/v0.23.1
• refs/tags/v0.23.2
• refs/tags/v0.24.0
• refs/tags/v0.25.0
• refs/tags/v0.25.1
• refs/tags/v0.25.2
• refs/tags/v0.26.0
• refs/tags/v0.27.0
• refs/tags/v0.27.1
• refs/tags/v0.27.2
• refs/tags/v0.27.3
• refs/tags/v0.28.0
• refs/tags/v0.28.1
• refs/tags/v0.29.0
• refs/tags/v0.29.1
• refs/tags/v0.29.2
• refs/tags/v0.30.0
• refs/tags/v0.31.0
• refs/tags/v0.32.0
• refs/tags/v0.32.1
• reload
• remove-commander
• remove-protocol-mock-tests
• replace-extract-zip
• rtl-dialogs
• sam/dependabot-fixes-2026-04
• sam/drop-redundant-npx
• secret-not-private
• settings-version-table-improvements
• show-me-typos
• slim-down-monaco-build
• test-make
• test/cleanup-rtl
• test/merge-rtl-spec
• test/rtl-editors-component
• test/run-electron-as-node
• test/unify-test-extensions
• test/vitest-3
• test/window-open-handler
• update-electron
• update-fuses
• upgrade-octokit
• v0.10.0
• v0.11.0
• v0.11.1
• v0.12.0
• v0.13.0
• v0.13.1
• v0.14.0
• v0.15.0
• v0.15.1
• v0.16.0
• v0.4.2
• v0.5.0
• v0.5.1
• v0.6.0
• v0.7.0
• v0.8.0
• v0.8.1
• v0.9.0
• vh/improve-gist-publish-error
• webpack-perf
• windows-sign-2
• yarn-4
• yarn-4-cleanup

Build # 25400544494

Build Type

Pull #1921

github

Committed by web-flow

Commit Message

Merge 61ed76161 into 0190129af

Pull Request Pull Request #1921: security: tighten up our CSP

Coverage Stats

503 of 559 branches covered (89.98%)

Branch coverage included in aggregate %.

3411 of 3864 relevant lines covered (88.28%)

47.8 hits per line