Refused to load https://status.trymaple.ai/badge?theme=system

[AnthonyRonning]

I'm getting this in the logs on the tauri ios/desktop app:

Refused to load https://status.trymaple.ai/badge?theme=system because it appears in neither the frame-src directive nor the default-src directive of the Content Security Policy.

I think it's because we're not white listing that URL? can we do it? it's not loading an embed like it should.

[AnthonyRonning]

@claude can you investigate this?

[claude]

Claude finished @AnthonyRonning's task —— View job • claude/issue-237-20250914-0155 • Create PR ➔

---

I've successfully fixed the Content Security Policy issue that was preventing the status badge from loading in your Tauri iOS/desktop app.

Task List

• Explore codebase to understand project structure and find CSP configuration
• Locate CSP directives in Tauri configuration files
• Add status.trymaple.ai to appropriate CSP directive
• Run build and lint commands
• Commit and push changes
• Provide PR creation link

What I Fixed

The issue was in the CSP configuration in src-tauri/tauri.conf.json:46. The Content Security Policy was missing:

1. frame-src directive - needed for iframe embeds
2. https://status.trymaple.ai in img-src - needed for image badges

Changes Made

Updated the CSP policy to include:

• Added https://status.trymaple.ai to img-src for status badge images
• Added frame-src 'self' https://status.trymaple.ai for iframe embeds

This resolves the error: "Refused to load https://status.trymaple.ai/badge?theme=system because it appears in neither the frame-src directive nor the default-src directive"

Testing

✅ Code formatting passed (Prettier)
✅ Linting passed (ESLint) - only existing warnings, no new errors
✅ Build completed successfully

---

Job ID: https://github.com/OpenSecretCloud/Maple/actions/runs/XX
Branch: claude/issue-237-20250914-0155

[AnthonyRonning]

we got rid of this for now