From f5e6db0c3501d29067af09cf57b1f33361764ac4 Mon Sep 17 00:00:00 2001
From: yanweidong <david.yan@qq.com>
Date: Wed, 22 Jul 2026 23:20:49 +0800
Subject: [PATCH] fix(desktop): allow API connections on custom ports

---
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 apps/mini/src-tauri/tauri.conf.json    | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 7ae3bde..d392fcd 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -18,7 +18,7 @@
       }
     ],
     "security": {
-      "csp": "default-src 'self'; img-src 'self' asset: https: data:; style-src 'self' 'unsafe-inline'; connect-src http://* https://*"
+      "csp": "default-src 'self'; img-src 'self' asset: https: data:; style-src 'self' 'unsafe-inline'; connect-src http: https:"
     }
   },
   "bundle": {
diff --git a/apps/mini/src-tauri/tauri.conf.json b/apps/mini/src-tauri/tauri.conf.json
index d718810..ef28f21 100644
--- a/apps/mini/src-tauri/tauri.conf.json
+++ b/apps/mini/src-tauri/tauri.conf.json
@@ -24,7 +24,7 @@
       }
     ],
     "security": {
-      "csp": "default-src 'self'; img-src 'self' asset: https: data:; style-src 'self' 'unsafe-inline'; connect-src http://* https://*"
+      "csp": "default-src 'self'; img-src 'self' asset: https: data:; style-src 'self' 'unsafe-inline'; connect-src http: https:"
     }
   },
   "bundle": {