fix: update Content Security Policy to include analytics and osu.ppy.sh

fix: Content Security Policy rules
fix: set csp to null, breaks assets in prod
2026-05-28 00:39:45 +02:00 · 2026-05-28 00:09:23 +02:00 · 2026-05-27 23:31:32 +02:00
1 changed files with 14 additions and 1 deletions
@@ -26,7 +26,20 @@
    ],
    "withGlobalTauri": true,
    "security": {
-      "csp": "default-src 'self' tauri: asset:; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' asset: data: blob: https://assets.ppy.sh https://a.ez-pp.farm https://git.ez-pp.farm https://osu.direct; connect-src 'self' https://ez-pp.farm https://api.ez-pp.farm https://c.ez-pp.farm https://analytics.ez-pp.farm https://git.ez-pp.farm https://osu.direct; media-src 'self' asset: blob:;",
+      "csp": {
+        "default-src": "'self' tauri: customprotocol: asset:",
+        "script-src": "'self' 'unsafe-inline' asset: http://asset.localhost https://asset.localhost https://analytics.ez-pp.farm",
+        "style-src": "'self' 'unsafe-inline' asset: http://asset.localhost https://asset.localhost",
+        "img-src": "'self' asset: http://asset.localhost https://asset.localhost blob: data: https://assets.ppy.sh https://a.ez-pp.farm https://git.ez-pp.farm https://osu.direct",
+        "connect-src": "'self' ipc: http://ipc.localhost https://ez-pp.farm https://api.ez-pp.farm https://c.ez-pp.farm https://analytics.ez-pp.farm https://git.ez-pp.farm https://osu.direct https://osu.ppy.sh",
+        "media-src": "'self' asset: http://asset.localhost https://asset.localhost blob:",
+        "font-src": [
+          "'self'",
+          "asset:",
+          "http://asset.localhost",
+          "https://asset.localhost"
+        ]
+      },
      "assetProtocol": {
        "enable": true,
        "scope": [
Author	SHA1	Message	Date
HorizonCode	051a86943e	fix: update Content Security Policy to include analytics and osu.ppy.sh	2026-05-28 00:39:45 +02:00
HorizonCode	7d0147edb9	fix: Content Security Policy rules	2026-05-28 00:09:23 +02:00
HorizonCode	7e2404753b	fix: set csp to null, breaks assets in prod	2026-05-27 23:31:32 +02:00