Merge pull request #11 from SillyLittleTech/codex/fix-insecure-baseurl-in-web-view

kiyarose · web-flow · commit 06794021d8b4 · 2026-03-28T04:22:37.000-04:00
Fix insecure WKWebView fallback baseURL in ViewController
diff --git a/mos/Flean/ViewController.swift b/mos/Flean/ViewController.swift
@@ -49,7 +49,7 @@ class ViewController: NSViewController, WKNavigationDelegate, WKScriptMessageHan
           </body>
         </html>
         """
-      self.webView.loadHTMLString(fallbackHTML, baseURL: nil)
+      self.webView.loadHTMLString(fallbackHTML, baseURL: Bundle.main.bundleURL)
       return
     }
 

Original file line number	Diff line number	Diff line change
`@@ -49,7 +49,7 @@ class ViewController: NSViewController, WKNavigationDelegate, WKScriptMessageHan`
`49`	`49`	`</body>`
`50`	`50`	`</html>`
`51`	`51`	`"""`
`52`		`- self.webView.loadHTMLString(fallbackHTML, baseURL: nil)`
	`52`	`+ self.webView.loadHTMLString(fallbackHTML, baseURL: Bundle.main.bundleURL)`
`53`	`53`	`return`
`54`	`54`	`}`
`55`	`55`