From 2cba4b98f3e2b1cb6cb240bf58a20e71111c8717 Mon Sep 17 00:00:00 2001 From: vansangpfiev Date: Fri, 18 Apr 2025 11:17:06 +0700 Subject: [PATCH] chore: update csp config and cors --- src-tauri/src/core/setup.rs | 2 +- src-tauri/tauri.conf.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src-tauri/src/core/setup.rs b/src-tauri/src/core/setup.rs index 9b8e6036c..f036636de 100644 --- a/src-tauri/src/core/setup.rs +++ b/src-tauri/src/core/setup.rs @@ -218,7 +218,7 @@ pub fn setup_sidecar(app: &App) -> Result<(), String> { "--cors", "ON", "--allowed_origins", - "http://localhost:3000", + "http://localhost:3000,tauri://localhost", "config", "--api_keys", app_state.inner().app_token.as_deref().unwrap_or(""), diff --git a/src-tauri/tauri.conf.json b/src-tauri/tauri.conf.json index b5d978e9b..d9d0ca70b 100644 --- a/src-tauri/tauri.conf.json +++ b/src-tauri/tauri.conf.json @@ -30,7 +30,7 @@ "security": { "csp": { "default-src": "'self' customprotocol: asset: http://localhost:* http://127.0.0.1:* ws://localhost:* ws://127.0.0.1:*", - "connect-src": "ipc: http://ipc.localhost", + "connect-src": "ipc: http://ipc.localhost http://127.0.0.1:* ws://localhost:* ws://127.0.0.1:*", "font-src": ["https://fonts.gstatic.com blob: data:"], "img-src": "'self' asset: http://asset.localhost blob: data:", "style-src": "'unsafe-inline' 'self' https://fonts.googleapis.com",