From fd1346c5f402bae694090b409b4e38968ada7793 Mon Sep 17 00:00:00 2001 From: Ralph Slooten Date: Mon, 19 Sep 2022 22:17:20 +1200 Subject: [PATCH] Fix: Workaround for Safari source matching bug blocking event listener The current stable version of Safari does not treat ws: or wss: sockets as `self`. See: https://bugs.webkit.org/show_bug.cgi?id=235873 Resolves #13 --- server/server.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/server.go b/server/server.go index a53b663..93be26f 100644 --- a/server/server.go +++ b/server/server.go @@ -21,7 +21,7 @@ import ( //go:embed ui var embeddedFS embed.FS -var contentSecurityPolicy = "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self'; img-src * data: blob:; font-src 'self' data:; media-src 'self'; connect-src 'self'; object-src 'none'; base-uri 'self';" +var contentSecurityPolicy = "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self'; img-src * data: blob:; font-src 'self' data:; media-src 'self'; connect-src 'self' ws: wss:; object-src 'none'; base-uri 'self';" // Listen will start the httpd func Listen() {