From 1b4a6ff0cf4a0f150565bbed65763cdfba796fa9 Mon Sep 17 00:00:00 2001 From: bruno Date: Sun, 26 Jul 2026 11:32:43 -0400 Subject: [PATCH] fix: ensurepip pour Python embed + CSP autorise 127.0.0.1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - build-windows.bat: ajouter python -m ensurepip --upgrade (Python embed n'a pas pip) - tauri.conf.json: ajouter http://127.0.0.1:* dans toutes les directives CSP Sans ça, 'self' = schéma tauri://, pas le backend local → CSS/images bloqués --- desktop/build-windows.bat | 3 +++ desktop/tauri.conf.json | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/desktop/build-windows.bat b/desktop/build-windows.bat index 301f304..3629273 100644 --- a/desktop/build-windows.bat +++ b/desktop/build-windows.bat @@ -27,6 +27,9 @@ del python-embed.zip REM Enable pip in embedded Python echo import site >> python-embed\python311._pth +REM Bootstrap pip (embed Python doesn't include it) +python-embed\python.exe -m ensurepip --upgrade + REM Install dependencies python-embed\python.exe -m pip install --no-cache-dir -r ..\backend\requirements.txt echo ✅ Python embed ready diff --git a/desktop/tauri.conf.json b/desktop/tauri.conf.json index 4de645f..d0554da 100644 --- a/desktop/tauri.conf.json +++ b/desktop/tauri.conf.json @@ -27,7 +27,7 @@ } ], "security": { - "csp": "default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://esm.sh; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' http://127.0.0.1:* ws://127.0.0.1:*;" + "csp": "default-src 'self' http://127.0.0.1:*; script-src 'self' 'unsafe-inline' http://127.0.0.1:* https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://esm.sh; style-src 'self' 'unsafe-inline' http://127.0.0.1:* https://cdnjs.cloudflare.com https://fonts.googleapis.com; font-src 'self' http://127.0.0.1:* https://fonts.gstatic.com; img-src 'self' data: blob: http://127.0.0.1:* https:; connect-src 'self' http://127.0.0.1:* ws://127.0.0.1:*;" }, "trayIcon": { "iconPath": "icons/icon.png",