diff --git a/apps/desktop/src/renderer/index.html b/apps/desktop/src/renderer/index.html
index 1d79221b3bc..62f2146d264 100644
--- a/apps/desktop/src/renderer/index.html
+++ b/apps/desktop/src/renderer/index.html
@@ -12,10 +12,12 @@
- script-src 'self' 'wasm-unsafe-eval' https://*.posthog.com: Allow scripts from same origin + WebAssembly (for xterm ImageAddon) + PostHog
- style-src 'self' 'unsafe-inline': Allow styles from same origin + inline (needed for CSS-in-JS)
- connect-src 'self' ws: wss: %NEXT_PUBLIC_API_URL% %NEXT_PUBLIC_ELECTRIC_URL% %NEXT_PUBLIC_STREAMS_URL% https://*.posthog.com https://*.sentry.io sentry-ipc:: Allow WebSocket + API + Electric proxy + Streams server + PostHog + Sentry
- - img-src 'self' data: https: Allow images from same origin + data URIs + any HTTPS source (needed for favicons from arbitrary sites in browser history)
+ - img-src 'self' data: https: http: blob:: Allow images from any source (needed for favicons and browser pane webview content)
- font-src 'self': Allow fonts from same origin
+ - frame-src https: http: data: blob:: Allow webview browser pane to load any URL
+ - child-src 'self' blob:: Allow workers from same origin + blob workers
-->
-
+
diff --git a/apps/desktop/src/renderer/screens/main/components/WorkspaceView/ContentView/TabsContent/TabView/BrowserPane/hooks/usePersistentWebview/usePersistentWebview.ts b/apps/desktop/src/renderer/screens/main/components/WorkspaceView/ContentView/TabsContent/TabView/BrowserPane/hooks/usePersistentWebview/usePersistentWebview.ts
index dbed8f24995..fd905846837 100644
--- a/apps/desktop/src/renderer/screens/main/components/WorkspaceView/ContentView/TabsContent/TabView/BrowserPane/hooks/usePersistentWebview/usePersistentWebview.ts
+++ b/apps/desktop/src/renderer/screens/main/components/WorkspaceView/ContentView/TabsContent/TabView/BrowserPane/hooks/usePersistentWebview/usePersistentWebview.ts
@@ -140,6 +140,8 @@ export function usePersistentWebview({
webview = document.createElement("webview") as Electron.WebviewTag;
webview.setAttribute("partition", "persist:superset");
webview.setAttribute("allowpopups", "");
+ webview.style.display = "flex";
+ webview.style.flex = "1";
webview.style.width = "100%";
webview.style.height = "100%";
webview.style.border = "none";