SheWhoReignsSupreme/Equicord
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix CSP

Browse source
This commit is contained in:
thororen1234 2025-10-07 16:41:44 -04:00
parent 2d40b9d45b
commit 2c9ae104b4
No known key found for this signature in database
2 changed files with 8 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
src/main/csp/index.ts
View file

@ -131,7 +131,7 @@ const patchCsp = (headers: PolicyMap) => {
};
export function initCsp() {
session.defaultSession.webRequest.onHeadersReceived(({ responseHeaders, resourceType }, cb) => {
session.defaultSession.webRequest.onHeadersReceived(({ responseHeaders, resourceType, url }, cb) => {
if (responseHeaders) {
if (resourceType === "mainFrame")
patchCsp(responseHeaders);
@ -143,6 +143,13 @@ export function initCsp() {
if (header)
responseHeaders[header] = ["text/css"];
}
const parsedUrl = new URL(url);
if (parsedUrl.hostname === "cdn.discordapp.com" && parsedUrl.pathname.startsWith("/attachments")) {
responseHeaders["Access-Control-Allow-Origin"] = ["*"];
responseHeaders["Access-Control-Allow-Methods"] = ["*"];
responseHeaders["Access-Control-Allow-Headers"] = ["*"];
}
}
cb({ cancel: false, responseHeaders });

15
src/main/index.ts
View file

@ -96,19 +96,6 @@ if (!IS_VANILLA && !IS_EXTENSION) {
}
});
protocol.handle("https", async req => {
const res = await net.fetch(req, { bypassCustomProtocolHandlers: true });
const headers = new Headers(res.headers);
headers.set("Access-Control-Allow-Origin", "*");
headers.set("Access-Control-Allow-Methods", "*");
headers.set("Access-Control-Allow-Headers", "*");
return new Response(res.body, {
...res,
headers,
});
});
try {
if (RendererSettings.store.enableReactDevtools)
installExt("fmkadmapgofadopljbjfkapdkoienihi")
@ -116,10 +103,8 @@ if (!IS_VANILLA && !IS_EXTENSION) {
.catch(err => console.error("[Equicord] Failed to install React Developer Tools", err));
} catch { }
initCsp();
});
}
if (IS_DISCORD_DESKTOP) {