chore: wildcard for connect-src (#5048)

* chore: wildcard for connect-source

* chore: stricter list of connect-src

* chore: update tauri.conf.json

* chore: update font-src
This commit is contained in:
vansangpfiev 2025-05-22 15:16:24 +08:00 committed by GitHub
parent e43b109291
commit 2d7d731a76
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -38,9 +38,9 @@
"security": {
"csp": {
"default-src": "'self' customprotocol: asset: http://localhost:* http://127.0.0.1:* ws://localhost:* ws://127.0.0.1:*",
"connect-src": "ipc: http://ipc.localhost http://127.0.0.1:* ws://localhost:* ws://127.0.0.1:* https://registry.npmjs.org",
"connect-src": "ipc: http://ipc.localhost http://127.0.0.1:* ws://localhost:* ws://127.0.0.1:* https:",
"font-src": [
"https://fonts.gstatic.com blob: data:"
"https://fonts.gstatic.com blob: data: tauri://localhost/*"
],
"img-src": "'self' asset: http://asset.localhost blob: data:",
"style-src": "'unsafe-inline' 'self' https://fonts.googleapis.com",