chore: update csp config and cors

This commit is contained in:
vansangpfiev 2025-04-18 11:17:06 +07:00
parent b83ee8dd0d
commit 2cba4b98f3
2 changed files with 2 additions and 2 deletions

View File

@ -218,7 +218,7 @@ pub fn setup_sidecar(app: &App) -> Result<(), String> {
"--cors", "--cors",
"ON", "ON",
"--allowed_origins", "--allowed_origins",
"http://localhost:3000", "http://localhost:3000,tauri://localhost",
"config", "config",
"--api_keys", "--api_keys",
app_state.inner().app_token.as_deref().unwrap_or(""), app_state.inner().app_token.as_deref().unwrap_or(""),

View File

@ -30,7 +30,7 @@
"security": { "security": {
"csp": { "csp": {
"default-src": "'self' customprotocol: asset: http://localhost:* http://127.0.0.1:* ws://localhost:* ws://127.0.0.1:*", "default-src": "'self' customprotocol: asset: http://localhost:* http://127.0.0.1:* ws://localhost:* ws://127.0.0.1:*",
"connect-src": "ipc: http://ipc.localhost", "connect-src": "ipc: http://ipc.localhost http://127.0.0.1:* ws://localhost:* ws://127.0.0.1:*",
"font-src": ["https://fonts.gstatic.com blob: data:"], "font-src": ["https://fonts.gstatic.com blob: data:"],
"img-src": "'self' asset: http://asset.localhost blob: data:", "img-src": "'self' asset: http://asset.localhost blob: data:",
"style-src": "'unsafe-inline' 'self' https://fonts.googleapis.com", "style-src": "'unsafe-inline' 'self' https://fonts.googleapis.com",