Fix Firefox CSP upgrading ws:// to wss:// for local WebSocket connections
CI / Build & Test (push) Successful in 2m58s

Firefox's default MV3 CSP includes upgrade-insecure-requests, which upgrades
ws://127.0.0.1 to wss:// and breaks SSH/RDP WebSocket connections to the
local native host. Add explicit content_security_policy to manifest_firefox.json
allowing ws://127.0.0.1:* and http://127.0.0.1:* on extension pages.
This commit is contained in:
Raven Scott
2026-03-03 03:18:17 -05:00
parent 39e65b2e9c
commit 99782ce209
3 changed files with 3 additions and 0 deletions
+3
View File
@@ -89,6 +89,9 @@
"strict_min_version": "109.0"
}
},
"content_security_policy": {
"extension_pages": "default-src 'self'; script-src 'self'; connect-src 'self' ws://127.0.0.1:* http://127.0.0.1:*;"
},
"host_permissions": [
"*://*.host.local/*",
"*://*.hole.sail/*"
Binary file not shown.
Binary file not shown.