respira/electron
Jan-Henrik Bruhn 8e84cbf609 fix: Implement Content Security Policy and secure COOP/COEP headers
- Add strict Content Security Policy to protect against XSS attacks
- Implement custom app:// protocol for production builds with proper headers
- Enable secure cross-origin isolation for SharedArrayBuffer support
- Remove insecure --enable-features bypass flag
- Add proper COOP/COEP/CORP headers for all resources
- Allow Pyodide workers to function in production builds

This fixes critical security vulnerabilities while maintaining full
functionality including Pyodide web workers and SharedArrayBuffer.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2025-12-19 12:43:54 +01:00
..
forge-env.d.ts Add Electron desktop application support with Electron Forge 2025-12-07 22:39:38 +01:00
main.ts fix: Implement Content Security Policy and secure COOP/COEP headers 2025-12-19 12:43:54 +01:00
preload.ts fix: run linter 2025-12-18 11:39:22 +01:00