fix: csp settings

Author: alex-crabnebula

clients/web/csp.js

@@ -15,10 +15,12 @@ export function generateCSP(isDev = false) {
     directives: {
       "default-src": [SELF],
       "frame-src": [SELF],
-      "script-src": isDev ? [SELF, UNSAFE_EVAL] : [SELF, WASM_UNSAFE_EVAL],
-      "style-src": isDev ? [SELF, UNSAFE_INLINE] : [SELF],
+      "script-src": isDev
+        ? [SELF, UNSAFE_EVAL, process.env.VITE_FATHOM_URL]
+        : [SELF, WASM_UNSAFE_EVAL, process.env.VITE_FATHOM_URL],
+      "style-src": [SELF, UNSAFE_INLINE],
       "connect-src": [SELF, "127.0.0.1", "127.0.0.1:*", "ws://localhost:5173/"],
-      "img-src": [SELF],
+      "img-src": [SELF, process.env.VITE_FATHOM_URL],
       "object-src": [NONE],
     },
   });

clients/web/index.html

@@ -11,16 +11,8 @@
       id="app"
       class="grid bg-navy-700 bg-opacity-70 grid-rows-[var(--header-height),calc(100vh-calc(var(--header-height)+var(--footer-height))),var(--footer-height)] h-screen"
     ></div>
-    <div
-      style="
-        z-index: -10;
-        position: absolute;
-        inset: 0px;
-        opacity: 0.5;
-        overflow: hidden;
-      "
-    >
-      <img style="width: 100%; height: 100%" src="/bg.webp" aria-hidden />
+    <div class="z-[-10] absolute inset-0 opacity-50 overflow-hidden">
+      <img class="w-full h-full" src="/bg.webp" aria-hidden />
     </div>
     <!-- this one is handled by Vite. No need for subpath-->
     <script type="module" src="/src/render-client.tsx"></script>

clients/web/src/components/calls/detail-pane/traces/popover/tool-tip/row.tsx

@@ -3,9 +3,7 @@ import { type JSXElement, Show } from "solid-js";
 export function Row(props: { title: string; children?: JSXElement }) {
   return (
     <tr class="grid grid-cols-2 text-left">
-      <th style={{ "grid-column": props.children ? "" : "span 2" }}>
-        {props.title}
-      </th>
+      <th class={props.children ? "" : "col-span-2"}>{props.title}</th>
       <Show when={props.children}>
         <td>{props.children}</td>
       </Show>