From 92db997243f9ccc1a3d96b0a4c6ddcb2220cfdcf Mon Sep 17 00:00:00 2001
From: Benedict Jackson <bavjackson@gmail.com>
Date: Wed, 20 Aug 2025 10:54:26 +0100
Subject: [PATCH 1/3] use absolute positioning to fill iframe container

---
 media/vscode.css | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/media/vscode.css b/media/vscode.css
index 9fdfcb4d..6bc70bda 100644
--- a/media/vscode.css
+++ b/media/vscode.css
@@ -117,10 +117,17 @@ iframe {
 	outline-color: var(--vscode-focusBorder);
 }
 
+.content {
+	position: relative;
+}
+
 .content iframe {
+	position: absolute;
+	top: 0;
+	bottom: 0;
+	left: 0;
+	right: 0;
 	display: table-cell;
-	width: 100%;
-	height: 100%;
 	background: white; /* Browsers default to a white background */
 }
 

From 153228c3a1f3d9bd9b176241bc1bc7ac7d67e06d Mon Sep 17 00:00:00 2001
From: Benedict Jackson <bavjackson@gmail.com>
Date: Sat, 6 Sep 2025 11:24:31 +0100
Subject: [PATCH 2/3] whitelist all domains

---
 src/editorPreview/webviewComm.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/editorPreview/webviewComm.ts b/src/editorPreview/webviewComm.ts
index c051f6bf..3754babe 100644
--- a/src/editorPreview/webviewComm.ts
+++ b/src/editorPreview/webviewComm.ts
@@ -84,7 +84,7 @@ export class WebviewComm extends Disposable {
 		URLExt: string,
 		connection: Connection = this.currentConnection,
 		hostURI?: vscode.Uri,
-		windowId?: number | undefined,
+		windowId?: number | undefined
 	): Promise<string> {
 		if (URLExt.length > 0 && URLExt[0] == '/') {
 			URLExt = URLExt.substring(1);
@@ -222,7 +222,7 @@ export class WebviewComm extends Disposable {
 				-->
 				<meta http-equiv="Content-Security-Policy" content="
 					default-src 'none';
-					connect-src ${wsServerAddr};
+					connect-src *;
 					font-src ${this._panel.webview.cspSource};
 					style-src ${this._panel.webview.cspSource};
 					script-src 'nonce-${nonce}';

From 4618e9433133e67c4a137da3b4875ecb16988cc1 Mon Sep 17 00:00:00 2001
From: Benedict Jackson <bavjackson@gmail.com>
Date: Sat, 6 Sep 2025 11:35:34 +0100
Subject: [PATCH 3/3] whitelist domains on frame-src

---
 src/editorPreview/webviewComm.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/editorPreview/webviewComm.ts b/src/editorPreview/webviewComm.ts
index 3754babe..0b766c6c 100644
--- a/src/editorPreview/webviewComm.ts
+++ b/src/editorPreview/webviewComm.ts
@@ -226,7 +226,7 @@ export class WebviewComm extends Disposable {
 					font-src ${this._panel.webview.cspSource};
 					style-src ${this._panel.webview.cspSource};
 					script-src 'nonce-${nonce}';
-					frame-src ${httpServerAddr};
+					frame-src *;
 				">
 				<meta name="viewport" content="width=device-width, initial-scale=1.0">