Skip to content
This repository was archived by the owner on May 24, 2022. It is now read-only.

#516 Set CSP in Meta tag#517

Merged
amaury1093 merged 2 commits intomasterfrom
yj-csp-meta
May 6, 2019
Merged

#516 Set CSP in Meta tag#517
amaury1093 merged 2 commits intomasterfrom
yj-csp-meta

Conversation

@pmespresso
Copy link
Contributor

@pmespresso pmespresso commented May 3, 2019

closes #516

@Tbaut Tbaut requested a review from amaury1093 May 3, 2019 10:48
@axelchalon
Copy link
Contributor

axelchalon commented May 3, 2019

maybe we can also use the csp meta in dev for the sake of simplicity, and remove the csp handling in @electron-app altogether?

edit: csps differ and it seems to be too much of a hassle, nevermind

Copy link
Collaborator

@amaury1093 amaury1093 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

After fixing grumbles I'll try with yarn start and yarn electron. It's mainly playing around until we find the most restrictive CSP which makes the app work.

@axelchalon Agreed! I played a bit on light-ui, the only additional thing we need in yarn start is connect-src: http:; for hot-reloading, but I would propose to remove everything in onHeadersReceived and to drop hot-reloading

@amaury1093 amaury1093 merged commit 6541e1b into master May 6, 2019
@amaury1093 amaury1093 deleted the yj-csp-meta branch May 6, 2019 13:07
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Set CSP in meta tag

3 participants