skatespots/SkateSpots
1
0
Fork 0
Code Issues Pull requests Projects Releases 9 Packages Wiki Activity Actions 1

fix: remove CSP meta tag - was causing white screen in Capacitor APK

Browse source 
The CSP meta tag blocks Capacitor's internal asset loading (https://localhost
scheme) causing a white screen. Android/iOS provide OS-level sandboxing so
the CSP is not needed for security in native APK context.

Co-authored-by: shakespeare.diy <assistant@shakespeare.diy>
This commit is contained in:
shakespeare.diy 2026-06-18 21:24:02 +07:00
parent 6a059a067b
commit 26185c617a
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
index.html
View file

@ -3,7 +3,8 @@
<head> <head>
<meta charset="UTF-8" /> <meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover" /> <meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover" />
<meta http-equiv="content-security-policy" content="default-src 'self' capacitor: ionic: https:; script-src 'self' 'unsafe-inline' capacitor: ionic:; style-src 'self' 'unsafe-inline' https://unpkg.com; frame-src 'self' https:; font-src 'self' data: https:; base-uri 'self'; manifest-src 'self'; connect-src 'self' capacitor: ionic: blob: https: wss:; img-src 'self' capacitor: ionic: data: blob: https:; media-src 'self' capacitor: ionic: https:"> <!-- CSP intentionally omitted: app is sandboxed by Android/iOS at the OS level.
A restrictive CSP here breaks Capacitor's internal asset loading scheme. -->
<!-- PWA Manifest --> <!-- PWA Manifest -->
<link rel="manifest" href="/manifest.webmanifest"> <link rel="manifest" href="/manifest.webmanifest">