diff --git a/src/electron/main.js b/src/electron/main.js index 259f8341..de807009 100644 --- a/src/electron/main.js +++ b/src/electron/main.js @@ -84,21 +84,23 @@ function createWindow() { } // Add CSP headers to allow API connections - mainWindow.webContents.session.webRequest.onHeadersReceived((details, callback) => { - callback({ - responseHeaders: { - ...details.responseHeaders, - 'Content-Security-Policy': [ - "default-src 'self';" + - "connect-src 'self' https://api.endorser.ch https://*.timesafari.app;" + - "img-src 'self' data: https: blob:;" + - "script-src 'self' 'unsafe-inline' 'unsafe-eval';" + - "style-src 'self' 'unsafe-inline';" + - "font-src 'self' data:;" - ] - } - }) - }) + mainWindow.webContents.session.webRequest.onHeadersReceived( + (details, callback) => { + callback({ + responseHeaders: { + ...details.responseHeaders, + "Content-Security-Policy": [ + "default-src 'self';" + + "connect-src 'self' https://api.endorser.ch https://*.timesafari.app;" + + "img-src 'self' data: https: blob:;" + + "script-src 'self' 'unsafe-inline' 'unsafe-eval';" + + "style-src 'self' 'unsafe-inline';" + + "font-src 'self' data:;", + ], + }, + }); + }, + ); // Load the index.html mainWindow