|
|
@ -84,21 +84,23 @@ function createWindow() { |
|
|
|
} |
|
|
|
|
|
|
|
// Add CSP headers to allow API connections
|
|
|
|
mainWindow.webContents.session.webRequest.onHeadersReceived((details, callback) => { |
|
|
|
callback({ |
|
|
|
responseHeaders: { |
|
|
|
...details.responseHeaders, |
|
|
|
'Content-Security-Policy': [ |
|
|
|
"default-src 'self';" + |
|
|
|
"connect-src 'self' https://api.endorser.ch https://*.timesafari.app;" + |
|
|
|
"img-src 'self' data: https: blob:;" + |
|
|
|
"script-src 'self' 'unsafe-inline' 'unsafe-eval';" + |
|
|
|
"style-src 'self' 'unsafe-inline';" + |
|
|
|
"font-src 'self' data:;" |
|
|
|
] |
|
|
|
} |
|
|
|
}) |
|
|
|
}) |
|
|
|
mainWindow.webContents.session.webRequest.onHeadersReceived( |
|
|
|
(details, callback) => { |
|
|
|
callback({ |
|
|
|
responseHeaders: { |
|
|
|
...details.responseHeaders, |
|
|
|
"Content-Security-Policy": [ |
|
|
|
"default-src 'self';" + |
|
|
|
"connect-src 'self' https://api.endorser.ch https://*.timesafari.app;" + |
|
|
|
"img-src 'self' data: https: blob:;" + |
|
|
|
"script-src 'self' 'unsafe-inline' 'unsafe-eval';" + |
|
|
|
"style-src 'self' 'unsafe-inline';" + |
|
|
|
"font-src 'self' data:;", |
|
|
|
], |
|
|
|
}, |
|
|
|
}); |
|
|
|
}, |
|
|
|
); |
|
|
|
|
|
|
|
// Load the index.html
|
|
|
|
mainWindow |
|
|
|