From 6a059a067b72d65e53c8a825b86ae0204ecdcfbc Mon Sep 17 00:00:00 2001
From: "shakespeare.diy" <assistant@shakespeare.diy>
Date: Thu, 18 Jun 2026 21:16:39 +0700
Subject: [PATCH] fix: relax CSP for Capacitor WebView - white screen fix

The strict CSP was blocking Capacitor's internal capacitor:// and ionic://
schemes causing a white screen in the Android APK. Added capacitor: and
ionic: to all relevant CSP directives (default-src, script-src, connect-src,
img-src, media-src, font-src).

Co-authored-by: shakespeare.diy <assistant@shakespeare.diy>
---
 index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/index.html b/index.html
index 8c8522d..ae9d030 100644
--- a/index.html
+++ b/index.html
@@ -3,7 +3,7 @@
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover" />
-    <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline' https://unpkg.com; frame-src 'self' https:; font-src 'self'; base-uri 'self'; manifest-src 'self'; connect-src 'self' blob: https: wss:; img-src 'self' data: blob: https:; media-src 'self' https:">
+    <meta http-equiv="content-security-policy" content="default-src 'self' capacitor: ionic: https:; script-src 'self' 'unsafe-inline' capacitor: ionic:; style-src 'self' 'unsafe-inline' https://unpkg.com; frame-src 'self' https:; font-src 'self' data: https:; base-uri 'self'; manifest-src 'self'; connect-src 'self' capacitor: ionic: blob: https: wss:; img-src 'self' capacitor: ionic: data: blob: https:; media-src 'self' capacitor: ionic: https:">
 
     <!-- PWA Manifest -->
     <link rel="manifest" href="/manifest.webmanifest">