From 2d7d731a760e3a546a316f82e434c87dfce65a30 Mon Sep 17 00:00:00 2001 From: vansangpfiev Date: Thu, 22 May 2025 15:16:24 +0800 Subject: [PATCH] chore: wildcard for connect-src (#5048) * chore: wildcard for connect-source * chore: stricter list of connect-src * chore: update tauri.conf.json * chore: update font-src --- src-tauri/tauri.conf.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src-tauri/tauri.conf.json b/src-tauri/tauri.conf.json index add04d07b..32602c461 100644 --- a/src-tauri/tauri.conf.json +++ b/src-tauri/tauri.conf.json @@ -38,9 +38,9 @@ "security": { "csp": { "default-src": "'self' customprotocol: asset: http://localhost:* http://127.0.0.1:* ws://localhost:* ws://127.0.0.1:*", - "connect-src": "ipc: http://ipc.localhost http://127.0.0.1:* ws://localhost:* ws://127.0.0.1:* https://registry.npmjs.org", + "connect-src": "ipc: http://ipc.localhost http://127.0.0.1:* ws://localhost:* ws://127.0.0.1:* https:", "font-src": [ - "https://fonts.gstatic.com blob: data:" + "https://fonts.gstatic.com blob: data: tauri://localhost/*" ], "img-src": "'self' asset: http://asset.localhost blob: data:", "style-src": "'unsafe-inline' 'self' https://fonts.googleapis.com",