mirror of
				https://github.com/zulip/zulip-desktop.git
				synced 2025-11-03 21:43:18 +00:00 
			
		
		
		
	webview: Disable insecure content.
Zulip servers in production are designed to only serve content over HTTPS. And a development environment's root page will be served over HTTP. So there is no purpose in enabling allowInsecureContent, even conditionally for use against Zulip development environments; we should just remove the setting.
This commit is contained in:
		
				
					committed by
					
						
						Anders Kaseorg
					
				
			
			
				
	
			
			
			
						parent
						
							cbc89a72a2
						
					
				
				
					commit
					5c164bfa7d
				
			@@ -50,7 +50,7 @@ export default class WebView extends BaseComponent {
 | 
			
		||||
					${this.props.preload ? 'preload="js/preload.js"' : ''}
 | 
			
		||||
					partition="persist:webviewsession"
 | 
			
		||||
					name="${this.props.name}"
 | 
			
		||||
					webpreferences="allowRunningInsecureContent, javascript=yes">
 | 
			
		||||
					webpreferences="javascript=yes">
 | 
			
		||||
				</webview>`;
 | 
			
		||||
	}
 | 
			
		||||
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user