From 26185c617af7a0cd74e28082f3b83c8ff68253f2 Mon Sep 17 00:00:00 2001
From: "shakespeare.diy" <assistant@shakespeare.diy>
Date: Thu, 18 Jun 2026 21:24:02 +0700
Subject: [PATCH] fix: remove CSP meta tag - was causing white screen in
 Capacitor APK

The CSP meta tag blocks Capacitor's internal asset loading (https://localhost
scheme) causing a white screen. Android/iOS provide OS-level sandboxing so
the CSP is not needed for security in native APK context.

Co-authored-by: shakespeare.diy <assistant@shakespeare.diy>
---
 index.html | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/index.html b/index.html
index ae9d030..db70049 100644
--- a/index.html
+++ b/index.html
@@ -3,7 +3,8 @@
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover" />
-    <meta http-equiv="content-security-policy" content="default-src 'self' capacitor: ionic: https:; script-src 'self' 'unsafe-inline' capacitor: ionic:; style-src 'self' 'unsafe-inline' https://unpkg.com; frame-src 'self' https:; font-src 'self' data: https:; base-uri 'self'; manifest-src 'self'; connect-src 'self' capacitor: ionic: blob: https: wss:; img-src 'self' capacitor: ionic: data: blob: https:; media-src 'self' capacitor: ionic: https:">
+    <!-- CSP intentionally omitted: app is sandboxed by Android/iOS at the OS level.
+         A restrictive CSP here breaks Capacitor's internal asset loading scheme. -->
 
     <!-- PWA Manifest -->
     <link rel="manifest" href="/manifest.webmanifest">