🐛 fix csp for local env not recognizing localhost a valid (#1591)

Shopify · Dec 21, 2023 · 970073e · 970073e
1 parent f0415c9
commit 970073e
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 3 deletions.
diff --git a/.changeset/honest-hotels-cheer.md b/.changeset/honest-hotels-cheer.md
@@ -0,0 +1,5 @@
+---
+'@shopify/hydrogen': patch
+---
+
+🐛 fix content security policy for local enviorment for not recognizing localhost asset server as a valid policy
diff --git a/packages/hydrogen/src/csp/csp.ts b/packages/hydrogen/src/csp/csp.ts
@@ -66,11 +66,11 @@ function createCSPHeader(
 
   // Support localhost in development
   if (process.env.NODE_ENV === 'development') {
-    defaultDirectives.styleSrc = [...styleSrc, 'localhost:*'];
-    defaultDirectives.defaultSrc = [...defaultSrc, 'localhost:*'];
+    defaultDirectives.styleSrc = [...styleSrc, 'http://localhost:*'];
+    defaultDirectives.defaultSrc = [...defaultSrc, 'http://localhost:*'];
     defaultDirectives.connectSrc = [
       ...connectSrc,
-      'localhost:*',
+      'http://localhost:*',
       // For HMR:
       'ws://localhost:*',
       'ws://127.0.0.1:*',