From eb714776ba75de1b3bf1cd6760a49fcd94ba06f6 Mon Sep 17 00:00:00 2001
From: Nguyen Ngoc Minh <91668012+Minh141120@users.noreply.github.com>
Date: Tue, 29 Jul 2025 02:30:00 -0700
Subject: [PATCH] fix: csp including img.shields.io and
 cdn-uploads.huggingface.co in img-src directive (#5967)

* fix: csp including img.shields.io in img-src directive

* fix: add huggingface upload cdn to img-src directive
---
 src-tauri/tauri.conf.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src-tauri/tauri.conf.json b/src-tauri/tauri.conf.json
index 5a2c59a0c..a60340351 100644
--- a/src-tauri/tauri.conf.json
+++ b/src-tauri/tauri.conf.json
@@ -45,7 +45,7 @@
         "font-src": [
           "https://fonts.gstatic.com blob: data: tauri://localhost http://tauri.localhost"
         ],
-        "img-src": "'self' asset: http://asset.localhost blob: data: https://cdn.jsdelivr.net",
+        "img-src": "'self' asset: http://asset.localhost blob: data: https://cdn.jsdelivr.net https://img.shields.io https://cdn-uploads.huggingface.co",
         "style-src": "'unsafe-inline' 'self' https://fonts.googleapis.com",
         "script-src": "'self' asset: $APPDATA/**.* http://asset.localhost https://eu-assets.i.posthog.com https://posthog.com"
       },