From 7407545b6ebc3b2107a2a4ee3cc43a32669e4f5d Mon Sep 17 00:00:00 2001
From: Alexandr Stelnykovych <alexandr.stelnykovych@ivpn.net>
Date: Fri, 16 May 2025 19:10:17 +0300
Subject: [PATCH] [desktop] UI: Restrict CSP to 127.0.0.1:817

---
 desktop/tauri/src-tauri/tauri.conf.json5 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/desktop/tauri/src-tauri/tauri.conf.json5 b/desktop/tauri/src-tauri/tauri.conf.json5
index 4d0e7e8a..93869cb8 100644
--- a/desktop/tauri/src-tauri/tauri.conf.json5
+++ b/desktop/tauri/src-tauri/tauri.conf.json5
@@ -44,7 +44,7 @@
     "withGlobalTauri": true,
     "enableGTKAppId": false,
     "security": {
-      "csp": null
+      "csp": "default-src 'self'; connect-src http://127.0.0.1:817 ws://127.0.0.1:817;"
     }
   },
   "bundle": {