this addresses issue raised in #71

src/js/traffic.js

@@ -654,7 +654,7 @@ var onMainDocHeadersReceived = function(details) {
 
     // Enforce strict HTTPS?
     if ( requestScheme === 'https' && µm.tMatrix.evaluateSwitchZ('https-strict', pageStats.pageHostname) ) {
-        csp += "default-src https: data: chrome-search: 'unsafe-inline' 'unsafe-eval'";
+        csp += "default-src chrome-search: data: file: https: wss: 'unsafe-eval' 'unsafe-inline'";
     }
 
     // https://github.com/gorhill/httpswitchboard/issues/181