mirror of
https://github.com/storytold/artcraft.git
synced 2026-11-15 06:12:18 +00:00
On Windows production builds, convertFileSrc() generates https://asset.localhost/... URLs. The connect-src CSP only had "asset:" (covering asset:// on macOS/Linux) but not https://asset.localhost, causing the fetch() in GlobalFileDropHandler to be silently blocked — overlay appeared but no modal opened on drop.