From 7cf21ba8b49fc0538fb2f19fdd18ac01d2fc9c06 Mon Sep 17 00:00:00 2001
From: Lars Berger <lars.berger@yahoo.com>
Date: Sun, 28 Jul 2024 03:31:34 +0800
Subject: [PATCH] fix: CSP fix to allow local JS scripts to be loaded

---
 packages/desktop/tauri.conf.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/desktop/tauri.conf.json b/packages/desktop/tauri.conf.json
index 9a4291ab..82aa17e8 100644
--- a/packages/desktop/tauri.conf.json
+++ b/packages/desktop/tauri.conf.json
@@ -39,10 +39,10 @@
       "csp": {
         "default-src": "'self'",
         "style-src": "'self' 'unsafe-inline' *",
-        "script-src": "'self' 'unsafe-eval'",
+        "script-src": "'self' 'unsafe-eval' asset: http://asset.localhost",
         "connect-src": "'self' ipc: http://ipc.localhost ws://localhost:6123",
         "font-src": "'self' *",
-        "img-src": "'self' asset: blob: data: *"
+        "img-src": "'self' asset: http://asset.localhost blob: data: *"
       },
       "assetProtocol": {
         "enable": true,