Swagger UI Try out not working

[shavo007]

Hi,

When I enable preview mode for swagger UI, i want to test out my API locally via Try it out.

But in vscode i get a console error:

[Embedded Page] Refused to connect to 'http://localhost:8080/documents' because it violates the following Content Security Policy directive: "default-src 'none'". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback.

Not sure if this is related to the extension?

[ak1394]

Hi! This is caused by the tight content security policy used by the extension. I'll see if I can relax it enough to make try it out to work.

[generalov]

I've modified the extension locally by adding connect-src: https:; to the CSP directive and preview works fine for me. (Extensions: Open extension folder, change 42crunch.vscode-openapi-3.7.0/out/preview.js near the bottom).

Source code:

vscode-openapi/src/preview.ts

Line 150 in a0a7f2a

<meta http-equiv="Content-Security-Policy" content="default-src 'none'; img-src ${webview.cspSource} https: data:; script-src ${webview.cspSource}; style-src 'unsafe-inline';">

[vfateev]

Fixed