Jake f486ff4cbc feat(A.1 #2): build-time CSP regression guard for localhost LLM ...

Pins the connect-src CSP entries for http://127.0.0.1:* and
ws://127.0.0.1:* at build time. If a future edit to tauri.conf.json
strips the local-LLM permit, the kon crate fails to build rather than
shipping a binary whose webview fetch() silently 404s with an opaque
scope error (Vibe #438 / #487).

Closes item #2 of docs/whisper-ecosystem/brief.md — CSP widening itself
landed in an earlier commit; this is the regression-proofing the plan
calls for.

2026-04-22 00:26:15 +01:00

1.9 KiB

Raw Blame History

View Raw