Fix CSP

minggangw · minggangw · commit 85bde659f0b9 · 2025-08-22T10:39:28.000+08:00
diff --git a/electron_demo/turtle_tf2/README.md b/electron_demo/turtle_tf2/README.md
@@ -222,10 +222,16 @@ world → turtle2
    - Try restarting the Electron application
 
 5. **"electron: not found" or native module errors**
+
    - Make sure you ran `npm run rebuild` after `npm install`
    - Ensure Node.js version is compatible (16 or higher)
    - Try deleting `node_modules` and running `npm install && npm run rebuild` again
 
+6. **"THREE is not defined" or script loading errors**
+   - The demo uses CDN versions of Three.js which require internet connection
+   - If you see CSP (Content Security Policy) errors, ensure the CSP in index.html allows CDN domains
+   - For offline use, you can install Three.js locally: `npm install three@0.155.0` and update script paths in index.html
+
 ### Debugging Commands
 
 ```bash
diff --git a/electron_demo/turtle_tf2/index.html b/electron_demo/turtle_tf2/index.html
@@ -1,4 +1,5 @@
-<!DOCTYPE html>
+<!DOC  <meta http-equiv="Content-Security-Policy"
+    content="default-src 'self'; script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline';">PE html>
 <html>
 
 <head>
@@ -427,8 +428,8 @@ <h1>🐢 Turtle TF2 Transformation Demo</h1>
   </div>
 
   <!-- Include Three.js -->
-  <script src="https://cdnjs.cloudflare.com/ajax/libs/three.js/r128/three.min.js"></script>
-  <script src="https://cdn.jsdelivr.net/npm/three@0.128.0/examples/js/controls/OrbitControls.js"></script>
+  <script src="https://cdnjs.cloudflare.com/ajax/libs/three.js/r155/three.min.js"></script>
+  <script src="https://cdn.jsdelivr.net/npm/three@0.155.0/examples/js/controls/OrbitControls.js"></script>
   
   <!-- Main renderer script -->
   <script src="./renderer.js"></script>
