mirror of
https://github.com/block/buzz.git
synced 2026-08-18 06:50:31 +02:00
a7ea86cdcf
This change enables a Tauri content security policy that limits executable content to the packaged application and does not allow inline scripts. Relay, media, asset, and Tauri IPC schemes remain available for desktop compatibility. The policy contains the impact of a future renderer injection; it does not itself remove an injection bug. ## Testing - `git diff --check origin/main...codex/security-desktop-csp` - Rebased onto `origin/main` at `5c98932` - Full CI pending Originating Buzz thread: `buzz://message?channel=3928fe05-df61-4b5d-b9c7-d623b9b10ea1&id=3c6c02312f763fbe0d2bfc33a6c1a362f91d0354f3d18b039cf7a0558c1439d1` --------- Signed-off-by: Jordan Mecom <jm@squareup.com> Signed-off-by: Eli Foster <efoster@squareup.com> Co-authored-by: Eli Foster <efoster@squareup.com> Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
91 lines
2.4 KiB
JSON
91 lines
2.4 KiB
JSON
{
|
|
"$schema": "https://schema.tauri.app/config/2",
|
|
"productName": "Buzz",
|
|
"version": "0.5.5",
|
|
"identifier": "xyz.block.buzz.app",
|
|
"build": {
|
|
"beforeDevCommand": {
|
|
"script": "exec ./node_modules/.bin/vite",
|
|
"cwd": "..",
|
|
"wait": false
|
|
},
|
|
"devUrl": "http://localhost:1420",
|
|
"beforeBuildCommand": "pnpm build",
|
|
"frontendDist": "../dist"
|
|
},
|
|
"app": {
|
|
"windows": [
|
|
{
|
|
"title": "",
|
|
"width": 800,
|
|
"height": 600,
|
|
"maximized": true,
|
|
"visible": false,
|
|
"transparent": true,
|
|
"titleBarStyle": "Overlay",
|
|
"hiddenTitle": true,
|
|
"dragDropEnabled": false,
|
|
"trafficLightPosition": {
|
|
"x": 16,
|
|
"y": 25
|
|
},
|
|
"backgroundThrottling": "disabled",
|
|
"minWidth": 800,
|
|
"minHeight": 500
|
|
}
|
|
],
|
|
"macOSPrivateApi": true,
|
|
"security": {
|
|
"csp": "default-src 'self'; base-uri 'self'; form-action 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'wasm-unsafe-eval' https://cdn.jsdelivr.net/npm/@mediapipe/; style-src 'self' 'unsafe-inline'; font-src 'self' data:; connect-src 'self' ipc: http://ipc.localhost buzz-media: http://buzz-media.localhost https: http: wss: ws:; img-src 'self' buzz-media: http://buzz-media.localhost data: blob: https: http:; media-src 'self' buzz-media: http://buzz-media.localhost data: blob: https: http:; worker-src 'self' blob:"
|
|
}
|
|
},
|
|
"plugins": {
|
|
"updater": {
|
|
"endpoints": []
|
|
},
|
|
"deep-link": {
|
|
"desktop": {
|
|
"schemes": ["buzz"]
|
|
}
|
|
}
|
|
},
|
|
"bundle": {
|
|
"active": true,
|
|
"targets": "all",
|
|
"externalBin": [
|
|
"binaries/buzz-acp",
|
|
"binaries/buzz-agent",
|
|
"binaries/buzz-backend-kubernetes",
|
|
"binaries/buzz-dev-mcp",
|
|
"binaries/git-credential-nostr",
|
|
"binaries/buzz"
|
|
],
|
|
"icon": [
|
|
"icons/32x32.png",
|
|
"icons/128x128.png",
|
|
"icons/128x128@2x.png",
|
|
"icons/icon.icns",
|
|
"icons/icon.ico"
|
|
],
|
|
"macOS": {
|
|
"infoPlist": "Info.plist",
|
|
"entitlements": "Entitlements.plist",
|
|
"dmg": {
|
|
"background": "icons/dmg-background.png",
|
|
"windowSize": {
|
|
"width": 660,
|
|
"height": 532
|
|
},
|
|
"appPosition": {
|
|
"x": 191,
|
|
"y": 330
|
|
},
|
|
"applicationFolderPosition": {
|
|
"x": 469,
|
|
"y": 330
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|