hacklab/OASIS_MOBILE
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(csp): permitir scripts/estilos inline para que funcione mobile-ui

Browse source 
El CSP antes era 'script-src self http://localhost:3000/js' lo cual
bloqueaba el script inline que inyectamos para la paginación móvil
de mode-buttons. Esto explicaba por qué las flechas no aparecían
aunque la APK tuviera el código correcto.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
SITO 2026-05-09 00:44:12 +02:00
parent 64d3aeb0b1
commit 79c58d7144
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
nodejs-project/nodejs-project/src/client/middleware.js
View file

@ -73,8 +73,8 @@ module.exports = ({ host, port, middleware, allowHost }) => {
const csp = [ const csp = [
"default-src 'self'", "default-src 'self'",
"script-src 'self' http://localhost:3000/js", "script-src 'self' 'unsafe-inline' http://localhost:3000/js",
"style-src 'self'", "style-src 'self' 'unsafe-inline'",
"img-src 'self'", "img-src 'self'",
"media-src 'self' blob:", "media-src 'self' blob:",
"worker-src 'self' blob:", "worker-src 'self' blob:",