fix: correct csp setting (#974)

SteveLauC · web-flow · commit ab5ca242701f · 2025-11-14T10:34:29.000+08:00
diff --git a/src-tauri/tauri.conf.json b/src-tauri/tauri.conf.json
@@ -81,7 +81,9 @@
       }
     ],
     "security": {
-      "csp": "default-src blob: data: filesystem: ws: wss: http://127.0.0.1:* http://localhost:* 'unsafe-inline' 'unsafe-eval';",
+      "csp": {
+        "default-src": "'self' asset: http://127.0.0.1:* https://at.alicdn.com ipc: http://ipc.localhost http://asset.localhost blob: data:"
+      },
       "dangerousDisableAssetCspModification": true,
       "assetProtocol": {
         "enable": true,
@@ -144,4 +146,4 @@
     },
     "os": {}
   }
-}
+}
