refactor(core): custom protocol on Windows now uses the http scheme (#7779)

Author: lucasfernog

.changes/fix-windows-custom-protocol-url.md

@@ -0,0 +1,8 @@
+---
+"tauri": patch:breaking
+"@tauri-apps/api": patch:breaking
+"@tauri-apps/cli": patch:breaking
+"tauri-cli": patch:breaking
+---
+
+The custom protocol on Windows now uses the `http` scheme instead of `https`.

core/tauri/scripts/core.js

@@ -17,9 +17,13 @@
 
   window.__TAURI__.convertFileSrc = function convertFileSrc(filePath, protocol = 'asset') {
     const path = encodeURIComponent(filePath)
-    return osName === 'windows' || osName === 'android'
-      ? `https://${protocol}.localhost/${path}`
-      : `${protocol}://localhost/${path}`
+    return osName === 'windows'
+      ? `http://${protocol}.localhost/${path}`
+      : (
+        osName === 'android'
+          ? `https://${protocol}.localhost/${path}`
+          : `${protocol}://localhost/${path}`
+      )
   }
 
   window.__TAURI__.transformCallback = function transformCallback(

core/tauri/src/manager.rs

@@ -506,10 +506,13 @@ impl<R: Runtime> WindowManager<R> {
   }
 
   pub(crate) fn protocol_url(&self) -> Cow<'_, Url> {
-    #[cfg(any(windows, target_os = "android"))]
-    return Cow::Owned(Url::parse("https://tauri.localhost").unwrap());
-    #[cfg(not(any(windows, target_os = "android")))]
-    Cow::Owned(Url::parse("tauri://localhost").unwrap())
+    if cfg!(windows) {
+      Cow::Owned(Url::parse("http://tauri.localhost").unwrap())
+    } else if cfg!(target_os = "android") {
+      Cow::Owned(Url::parse("https://tauri.localhost").unwrap())
+    } else {
+      Cow::Owned(Url::parse("tauri://localhost").unwrap())
+    }
   }
 
   fn csp(&self) -> Option<Csp> {
@@ -612,6 +615,11 @@ impl<R: Runtime> WindowManager<R> {
     let window_origin = if window_url.scheme() == "data" {
       "null".into()
     } else if cfg!(windows) && window_url.scheme() != "http" && window_url.scheme() != "https" {
+      format!("http://{}.localhost", window_url.scheme())
+    } else if cfg!(target_os = "android")
+      && window_url.scheme() != "http"
+      && window_url.scheme() != "https"
+    {
       format!("https://{}.localhost", window_url.scheme())
     } else {
       format!(
@@ -876,6 +884,8 @@ mod test {
       assert_eq!(
         manager.get_url().to_string(),
         if cfg!(windows) {
+          "http://tauri.localhost/"
+        } else if cfg!(target_os = "android") {
           "https://tauri.localhost/"
         } else {
           "tauri://localhost"

core/tauri/src/pattern.rs

@@ -109,7 +109,9 @@ pub(crate) struct PatternJavascript {
 
 #[allow(dead_code)]
 pub(crate) fn format_real_schema(schema: &str) -> String {
-  if cfg!(windows) || cfg!(target_os = "android") {
+  if cfg!(windows) {
+    format!("http://{schema}.{ISOLATION_IFRAME_SRC_DOMAIN}")
+  } else if cfg!(target_os = "android") {
     format!("https://{schema}.{ISOLATION_IFRAME_SRC_DOMAIN}")
   } else {
     format!("{schema}://{ISOLATION_IFRAME_SRC_DOMAIN}")

core/tauri/test/fixture/src-tauri/tauri.conf.json

@@ -15,7 +15,7 @@
       }
     ],
     "security": {
-      "csp": "default-src blob: data: filesystem: ws: wss: http: https: tauri: 'unsafe-eval' 'unsafe-inline' 'self'; connect-src ipc: https://ipc.localhost"
+      "csp": "default-src blob: data: filesystem: ws: wss: http: https: tauri: 'unsafe-eval' 'unsafe-inline' 'self'; connect-src ipc: http://ipc.localhost https://ipc.localhost"
     }
   }
 }

examples/api/src-tauri/Cargo.lock

@@ -92,11 +92,11 @@
     "security": {
       "csp": {
         "default-src": "'self' customprotocol: asset:",
-        "connect-src": "ipc: https://ipc.localhost",
+        "connect-src": "ipc: http://ipc.localhost https://ipc.localhost",
         "font-src": [
           "https://fonts.gstatic.com"
         ],
-        "img-src": "'self' asset: https://asset.localhost blob: data:",
+        "img-src": "'self' asset: http://asset.localhost https://asset.localhost blob: data:",
         "style-src": "'unsafe-inline' 'self' https://fonts.googleapis.com"
       },
       "freezePrototype": true,
@@ -114,4 +114,4 @@
       }
     }
   }
-}
+}

examples/api/src-tauri/tauri.conf.json

@@ -51,7 +51,7 @@
       }
     ],
     "security": {
-      "csp": "default-src 'self'; connect-src ipc: https://ipc.localhost"
+      "csp": "default-src 'self'; connect-src ipc: http://ipc.localhost https://ipc.localhost"
     }
   }
 }

examples/commands/tauri.conf.json

@@ -50,7 +50,7 @@
       }
     ],
     "security": {
-      "csp": "default-src 'self'; connect-src ipc: https://ipc.localhost"
+      "csp": "default-src 'self'; connect-src ipc: http://ipc.localhost https://ipc.localhost"
     }
   }
 }

examples/helloworld/tauri.conf.json

@@ -60,7 +60,7 @@
       }
     ],
     "security": {
-      "csp": "default-src blob: data: filesystem: ws: wss: http: https: tauri: 'unsafe-eval' 'unsafe-inline' 'self' img-src: 'self'; connect-src ipc: https://ipc.localhost"
+      "csp": "default-src blob: data: filesystem: ws: wss: http: https: tauri: 'unsafe-eval' 'unsafe-inline' 'self' img-src: 'self'; connect-src ipc: http://ipc.localhost https://ipc.localhost"
     }
   }
 }