only set CSP to altair protocol

altair-graphql · Jun 21, 2024 · f8b4687 · f8b4687
1 parent 8110162
commit f8b4687
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/packages/altair-electron/src/app/window.ts b/packages/altair-electron/src/app/window.ts
@@ -285,6 +285,13 @@ export class WindowManager {
     }
 
     session.defaultSession.webRequest.onHeadersReceived((details, callback) => {
+      try {
+        const u = new url.URL(details.url);
+        // we only want to set the CSP for the altair custom protocol
+        if (u.protocol !== ALTAIR_CUSTOM_PROTOCOL + ':') {
+          return callback({ responseHeaders: details.responseHeaders });
+        }
+      } catch {}
       if (
         details.resourceType === 'mainFrame' ||
         details.resourceType === 'subFrame'