webview: Disable insecure content.

Zulip servers in production are designed to only serve content over
HTTPS.  And a development environment's root page will be served over
HTTP.

So there is no purpose in enabling allowInsecureContent, even
conditionally for use against Zulip development environments; we should
just remove the setting.
This commit is contained in:
Tim Abbott
2020-02-29 12:35:15 -08:00
committed by Anders Kaseorg
parent cbc89a72a2
commit 5c164bfa7d

View File

@@ -50,7 +50,7 @@ export default class WebView extends BaseComponent {
${this.props.preload ? 'preload="js/preload.js"' : ''}
partition="persist:webviewsession"
name="${this.props.name}"
webpreferences="allowRunningInsecureContent, javascript=yes">
webpreferences="javascript=yes">
</webview>`;
}