Problem/Motivation

This is a follow-up to adding support for localhost.

Capacitor is an open-source framework similar to Cordova for making mobile apps. Unfortunately, due to iOS idiosyncrasies, apps are hosted from capacitor://localhost instead of http://localhost. This means that CSP's validation will fail when, for example, you want to embed a webform in an iframe in a capacitor iPhone app.

Proposed resolution

Add support for this special capacitor URL in the validator.

CommentFileSizeAuthor
#2 3210646-2_csp_enable-capacitor-support.patch1.87 KBptmkenny

Comments

ptmkenny created an issue. See original summary.

ptmkenny’s picture

ptmkenny commented
Issue summary: View changes
Status: Active » Needs review
StatusFileSize
new 3210646-2_csp_enable-capacitor-support.patch1.87 KB

  • gapple committed fc1d896 on 8.x-1.x 
    Issue #3210646 by gapple, ptmkenny: Allow any valid protocol in config
gapple’s picture

gapple
he/they
Primary language English
commented
Status: Needs review » Fixed

Since the CSP spec's requirement is only that the scheme comply with RFC 3986, I've made that the validation requirement so that other frameworks/protocols won't require a code change.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.