fix: CSP fix to allow local JS scripts to be loaded

glzr-io · Jul 27, 2024 · 7cf21ba · 7cf21ba
1 parent 55ccc67
commit 7cf21ba
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/packages/desktop/tauri.conf.json b/packages/desktop/tauri.conf.json
@@ -39,10 +39,10 @@
       "csp": {
         "default-src": "'self'",
         "style-src": "'self' 'unsafe-inline' *",
-        "script-src": "'self' 'unsafe-eval'",
+        "script-src": "'self' 'unsafe-eval' asset: http://asset.localhost",
         "connect-src": "'self' ipc: http://ipc.localhost ws://localhost:6123",
         "font-src": "'self' *",
-        "img-src": "'self' asset: blob: data: *"
+        "img-src": "'self' asset: http://asset.localhost blob: data: *"
       },
       "assetProtocol": {
         "enable": true,