Closed zkurzyns closed 4 years ago
It's actually been on my list to completely delete the webpack CSP section. It's duplicated functionality with bmcweb, and unnecessary to have in webpack.
Closing this, it seems to be fixed with commit f6387628d22b525c20a16e4b928ceece0e03c92b
When developing phosphor-webui locally with qemu it is not possible to login into bmcweb.
Each attempt ends with message
Content Security Policy: The page’s settings blocked the loading of a resource at https://127.0.0.1/login (“connect-src”).
Workaround is to replace connect-src settings in file webpack.config.js with this:
connect-src': ['*']