Support workers in Android

Chrome/Android supports worker-src as of v59; Android 8.0 uses v58. Legacy client-src didn't seem to work.
complexdatacollective · Jul 26, 2018 · a1d6c2f · a1d6c2f
1 parent dd4f324
commit a1d6c2f
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/public/index.html b/public/index.html
@@ -2,15 +2,16 @@
 <html lang="en">
   <head>
     <meta charset="utf-8">
+    <!-- default-src contains `blob:` as worker-src fallback for Android <= 8.0 -->
     <meta http-equiv="Content-Security-Policy" content="
-      default-src gap://ready file://*;
+      default-src gap://ready file://* blob:;
       connect-src 'self' data: http://localhost:* https://localhost:*;
       img-src asset: 'self' android-webview-video-poster: data: cdvfile: file:;
       media-src 'self' asset: cdvfile: file: data:;
       style-src 'self' 'unsafe-inline';
       script-src 'self' 'unsafe-inline' 'unsafe-eval';
       font-src 'self' data:;
-      worker-src 'self' blob:;
+      worker-src blob:;
       "
     />
     <meta name="viewport" content="viewport-fit=cover, initial-scale=1, maximum-scale=1, user-scalable=no, width=device-width" />