fix: Content Security Policy rules

2026-05-28 00:09:23 +02:00
parent 7e2404753b
commit 7d0147edb9
1 changed files with 14 additions and 1 deletions
@@ -26,7 +26,20 @@
    ],
    "withGlobalTauri": true,
    "security": {
-      "csp": null,
+      "csp": {
+        "default-src": "'self' tauri: customprotocol: asset:",
+        "script-src": "'self' 'unsafe-inline' asset: http://asset.localhost https://asset.localhost",
+        "style-src": "'self' 'unsafe-inline' https://fonts.googleapis.com asset: http://asset.localhost https://asset.localhost",
+        "img-src": "'self' asset: http://asset.localhost https://asset.localhost blob: data: https://assets.ppy.sh https://a.ez-pp.farm https://git.ez-pp.farm https://osu.direct",
+        "connect-src": "'self' ipc: http://ipc.localhost https://ez-pp.farm https://api.ez-pp.farm https://c.ez-pp.farm https://analytics.ez-pp.farm https://git.ez-pp.farm https://osu.direct",
+        "media-src": "'self' asset: http://asset.localhost https://asset.localhost blob:",
+        "font-src": [
+          "'self'",
+          "asset:",
+          "http://asset.localhost",
+          "https://asset.localhost"
+        ]
+      },
      "assetProtocol": {
        "enable": true,
        "scope": [