{"record":{"id":"6cc9e9b1e489e1ec","repo":"ramensoftware/windhawk","slug":"the-webview-template-has-no-head-tag-to-inject-the-content","errorCode":null,"errorMessage":"The webview template has no tag to inject the Content-Security-Policy into","messagePattern":"The webview template has no tag to inject the Content-Security-Policy into","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"src/windhawk-vscode/src/extension.ts","lineNumber":2184,"sourceCode":"\tconst nonce = crypto.randomBytes(16).toString('hex');\n\n\tconst cspRulesWithNonce = cspRules.map(rule =>\n\t\trule.startsWith('script-src ') ? rule + ` 'nonce-${nonce}'` : rule\n\t);\n\n\tconst webviewPathOnDisk = baseDebugReactUiPath\n\t\t? vscode.Uri.file(baseDebugReactUiPath)\n\t\t: vscode.Uri.joinPath(extensionUri, 'webview');\n\n\tconst baseWebviewUri = webview.asWebviewUri(webviewPathOnDisk);\n\tlet html = fs.readFileSync(vscode.Uri.joinPath(webviewPathOnDisk, 'index.html').fsPath, 'utf8');\n\n\t// The base href, the CSP and the body markers are injected by patching the\n\t// bundled template. A template change which drops either anchor tag has to\n\t// fail here, not silently produce a webview without a CSP.\n\tconst headTag = '';\n\tif (!html.includes(headTag)) {\n\t\tthrow new Error('The webview template has no tag to inject the Content-Security-Policy into');\n\t}\n\n\t// The replacements go through replacer functions, not replacement strings,\n\t// so that a `$` sequence in an injected value is inserted verbatim instead\n\t// of being expanded as a replacement pattern.\n\thtml = html.replace(headTag, () => `\n\t\t\n\t\t\n\t\t