fix: add bdstatic.com to CSP allow list
diff --git a/src/editor/sandbox/index.js b/src/editor/sandbox/index.js
index b237a60..ce7b9f2 100644
--- a/src/editor/sandbox/index.js
+++ b/src/editor/sandbox/index.js
@@ -55,12 +55,14 @@
'*.unpkg.com',
'*.baidu.com',
'*.bdimg.com',
+ '*.bdstatic.com',
'apache.org',
'jsdelivr.net',
'jsdelivr.com',
'unpkg.com',
'baidu.com',
'bdimg.com',
+ 'bdstatic.com',
'cdnjs.cloudflare.com',
'cdn.bootcdn.net',
'lib.baomitu.com',
@@ -77,6 +79,7 @@
.map(([key, val]) => `${key} ${val.join(' ')}`)
.join('; ');
sandbox.srcdoc = srcdoc
+ .replace('__LANG__', document.documentElement.lang || 'en')
.replace('__CSP__', sandbox.csp)
.replace(
'<!--SCRIPTS-->',
diff --git a/src/editor/sandbox/srcdoc.html b/src/editor/sandbox/srcdoc.html
index b99bf48..e7ffd88 100644
--- a/src/editor/sandbox/srcdoc.html
+++ b/src/editor/sandbox/srcdoc.html
@@ -1,5 +1,5 @@
<!DOCTYPE html>
-<html>
+<html lang="__LANG__">
<head>
<meta charset="utf-8" />
<meta http-equiv="Content-Security-Policy" content="__CSP__" />
