this addresses issue raised in #71

10 years ago · baa8e86fd4
1 changed files with 1 additions and 1 deletions
--- a/src/js/traffic.js
+++ b/src/js/traffic.js
@ -654,7 +654,7 @@ var onMainDocHeadersReceived = function(details) {

    // Enforce strict HTTPS?
    if ( requestScheme === 'https' && µm.tMatrix.evaluateSwitchZ('https-strict', pageStats.pageHostname) ) {
-        csp += "default-src https: data: chrome-search: 'unsafe-inline' 'unsafe-eval'";
+        csp += "default-src chrome-search: data: file: https: wss: 'unsafe-eval' 'unsafe-inline'";
    }

    // https://github.com/gorhill/httpswitchboard/issues/181