fix: Allow devtools extensions to be installed

On the first startup in dev mode, Electron must be able to download the
devtools extensions and wait for them to be installed.

Loosens the UI process request filter a bit, but the behavior should
match production mode in all cases except chrome webstore URLs.
Nevertheless, only production mode should be considered secure.

Fixes #6

Signed-off-by: Kristóf Marussy <kristof@marussy.com>

1 files changed, 14 insertions, 0 deletions

diff --git a/packages/main/src/devTools.ts b/packages/main/src/devTools.ts
index 7c7c86a..398904c 100644
--- a/packages/main/src/devTools.ts
+++ b/packages/main/src/devTools.ts
@@ -21,6 +21,20 @@
 import type { BrowserWindow } from 'electron';
 
 /**
+ * URL prefixes Sophie is allowed load in dev mode.
+ *
+ * In dev mode, in addition to the application itself,
+ * Sophie must be able do download and load the devtools and related extensions,
+ * so we have to make exceptions in the UI process request filter.
+ */
+export const DEVMODE_ALLOWED_URL_PREFIXES = [
+  'chrome-extension:',
+  'devtools:',
+  'https://clients2.google.com/service/update2/crx',
+  'https://clients2.googleusercontent.com/crx',
+];
+
+/**
  * Installs the react and redux developer tools extensions.
  *
  * We use the redux devtools and connect the mobx store to it with `mst-middlewares`,