From c5afc52e170ee8f1b6a136f3020f254d62986551 Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Sun, 14 Sep 2025 01:58:03 +0000 Subject: [PATCH 1/2] fix: Allow status.trymaple.ai in CSP for status badge loading Adds https://status.trymaple.ai to both img-src and frame-src directives in the Content Security Policy to resolve the badge loading error in the Tauri iOS/desktop app. Co-authored-by: Anthony --- frontend/src-tauri/tauri.conf.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/frontend/src-tauri/tauri.conf.json b/frontend/src-tauri/tauri.conf.json index e6436bc20..a84ab326e 100644 --- a/frontend/src-tauri/tauri.conf.json +++ b/frontend/src-tauri/tauri.conf.json @@ -43,7 +43,7 @@ } ], "security": { - "csp": "default-src 'self'; connect-src 'self' https://opensecret.cloud https://*.opensecret.cloud https://trymaple.ai https://*.trymaple.ai https://secretgpt.ai https://*.secretgpt.ai https://*.maple-ca8.pages.dev https://raw.githubusercontent.com localhost:*; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:" + "csp": "default-src 'self'; connect-src 'self' https://opensecret.cloud https://*.opensecret.cloud https://trymaple.ai https://*.trymaple.ai https://secretgpt.ai https://*.secretgpt.ai https://*.maple-ca8.pages.dev https://raw.githubusercontent.com localhost:*; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://status.trymaple.ai; frame-src 'self' https://status.trymaple.ai; font-src 'self' data:" } }, "bundle": { From 3d0515dbab236154ad8df60d787128a761b5229c Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Mon, 15 Sep 2025 19:16:05 +0000 Subject: [PATCH 2/2] fix: Add child-src and connect-src for status badge iframe - Add child-src directive to allow iframe embedding on mobile webviews - Add status.trymaple.ai to connect-src for API calls - Addresses potential Tauri mobile protocol restrictions Co-authored-by: Anthony --- frontend/src-tauri/tauri.conf.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/frontend/src-tauri/tauri.conf.json b/frontend/src-tauri/tauri.conf.json index a84ab326e..8cf7b65ae 100644 --- a/frontend/src-tauri/tauri.conf.json +++ b/frontend/src-tauri/tauri.conf.json @@ -43,7 +43,7 @@ } ], "security": { - "csp": "default-src 'self'; connect-src 'self' https://opensecret.cloud https://*.opensecret.cloud https://trymaple.ai https://*.trymaple.ai https://secretgpt.ai https://*.secretgpt.ai https://*.maple-ca8.pages.dev https://raw.githubusercontent.com localhost:*; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://status.trymaple.ai; frame-src 'self' https://status.trymaple.ai; font-src 'self' data:" + "csp": "default-src 'self'; connect-src 'self' https://opensecret.cloud https://*.opensecret.cloud https://trymaple.ai https://*.trymaple.ai https://secretgpt.ai https://*.secretgpt.ai https://*.maple-ca8.pages.dev https://raw.githubusercontent.com https://status.trymaple.ai localhost:*; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://status.trymaple.ai; frame-src 'self' https://status.trymaple.ai; child-src 'self' https://status.trymaple.ai; font-src 'self' data:" } }, "bundle": {