restrictive CSP and tauri allowlist

2023-05-01 09:05:46 -07:00
parent 55775b6b05
commit 886fcd9bb8
6 changed files with 9 additions and 248 deletions
--- a/src-tauri/tauri.conf.json
+++ b/src-tauri/tauri.conf.json
@ -12,7 +12,7 @@
  },
  "tauri": {
    "allowlist": {
-      "all": true
+      "os": {"all": true}
    },
    "bundle": {
      "active": true,
@ -48,7 +48,10 @@
      }
    },
    "security": {
-      "csp": null
+      "csp": {
+        "default-src": ["'self'"],
+        "style-src": ["'self'", "'unsafe-inline'"]
+      }
    },
    "updater": {
      "active": false