content policy confusion

[shi-yan]

Once again, I'm blocked by content policy settings. My app works fine in debug, but the release version refuses to load my js worker:

I'm puzzled as always. my current content policy is the following:

      "csp":  "default-src 'self'; connect-src ipc: http://ipc.localhost; worker-src: tauri://localhost; img-src 'self' asset: https://asset.localhost asset://localhost; frame-src https://*.youtube.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com",

in particular, I already have worker-src: tauri://localhost;, I don't know what the correct string should be?

and for the second error, I tried script-src: 'self'; couldn't work.

[shi-yan]

ok, ChatGPT saved my day (again). the corrected csp:

"csp": "default-src 'self'; connect-src ipc: http://ipc.localhost; worker-src tauri://localhost blob:; img-src 'self' asset: https://asset.localhost asset://localhost; frame-src https://*.youtube.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; script-src 'self' data:;"